The text holds more than one cookie; only the first was checked.

COOKIE_MULTIPLE · Severity: Info

• InfoCOOKIE_MULTIPLE

  The text holds more than one cookie; only the first was checked.

  The parser reads one Set-Cookie value. A second line, or a second cookie joined on with a comma (as fetch() and some tools show several Set-Cookie headers), is not read, and nothing from it is returned.

  Recommendation: Paste one Set-Cookie value at a time.

Reported by

• Set-Cookie parser

Available through the API

• Set-Cookie parser API

Related findings

• Error COOKIE_INVALID The Set-Cookie value has no valid name=value pair.
• Info COOKIE_LONG_LIFETIME The cookie asks to live longer than the 400 days browsers allow.
• Warning COOKIE_NOT_SECURE The HTTPS site sets a cookie without the Secure attribute.
• Info COOKIE_NO_HTTPONLY The cookie can be read by scripts (no HttpOnly attribute).
• Info COOKIE_NO_SAMESITE The cookie has no SameSite attribute.
• Warning COOKIE_NO_SECURE The cookie has no Secure attribute.

All findings