HTTP Cookie header value
ID http_cookie
DatatypeNot PIIDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Value of the HTTP Cookie request header: one or more cookie-name=cookie-value pairs separated by a semicolon and a space, as RFC 6265 defines it. Cookies often carry session identifiers, so the value can grant access to an account.
- Categories
- Internet, Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- MISP attribute type
cookie- Quality
- 88/100 · missing: second example, translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Datadog Sensitive Data Scanner
Regular expression
^[!#$%&'*+.^_`|~0-9A-Za-z-]+=(?:"[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*"|[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*)(?:; [!#$%&'*+.^_`|~0-9A-Za-z-]+=(?:"[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*"|[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*))*$
Python re syntax.
Examples
| Value | Description |
|---|---|
| SID=31d4d96e407aad42; lang=en-US | Example from RFC 6265 |
| SID=31d4d96e407aad42;lang=en-US invalid | No space after the semicolon |
Sources
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/http_cookie - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/internet/http_cookie.yamlon GitHub