Inspect cookie attributes in a local scenario
Apply selected RFC 6265bis and Partitioned rules to Set-Cookie lines, a URL, a time and the site or partition context you supply.
- Runs in your browser
- No upload
- Check before download
Apply selected RFC 6265bis and Partitioned rules to Set-Cookie lines, a URL, a time and the site or partition context you supply. Case-insensitive prefixes, HTTPS Secure, default Lax and the 400-day expiry are modeled; public-suffix data, browser exceptions and the recent-unsafe grace period are not. Cookie values are omitted, and nothing is set.
Local processing and secrets
Inputs stay in this tab and its terminable worker. No input, secret, filename or contact is sent to a service, stored, logged or measured. Fixed parser/code/metadata assets load from this site only for the selected job. Sensitive inputs have no original-backup button; private exports require an explicit choice and download. Reset or leave the page to release the references; memory erasure cannot be guaranteed by JavaScript. Test-secret fields accept multiple lines and are visible in this tab.
Resource limits
At most1MiB combined UTF8 string/file bytes,200,000 UTF16 units per string,1,000 batch rows,32 nesting levels and20,000 input nodes; at most4MiB of export files and20 files. Every run ends or is terminated after15 seconds. CSR DER≤64KiB; DKIM headers≤128KiB/1,000 fields/8KiB per field and20,000 mail lines. TypeScript≤20 files,25,000 characters each/100,000 total,20,000 tokens per file,128 syntax levels,100,000 AST nodes and1,000 diagnostics. These are application limits, not a total worker-heap cap. CSV is UTF8, quoted, comma/CRLF, with formula-prefix protection and a declared null marker.
Use and verify the result
- Input, one record per line
Apply selected RFC 6265bis and Partitioned rules to Set-Cookie lines, a URL, a time and the site or partition context you supply. Case-insensitive prefixes, HTTPS Secure, default Lax and the 400-day expiry are modeled; public-suffix data, browser exceptions and the recent-unsafe grace period are not. Cookie values are omitted, and nothing is set.
- Declared profile
Choose the exact profile and provide only synthetic or your own authorized data. Inspect per-record errors, assumptions and unknowns before saving. Reopen native outputs with an independent format reader; a valid local result does not prove external acceptance. Cancelling, editing or resetting discards stale results.
- Local processing and secrets
Inputs stay in this tab and its terminable worker. No input, secret, filename or contact is sent to a service, stored, logged or measured. Fixed parser/code/metadata assets load from this site only for the selected job. Sensitive inputs have no original-backup button; private exports require an explicit choice and download. Reset or leave the page to release the references; memory erasure cannot be guaranteed by JavaScript. Test-secret fields accept multiple lines and are visible in this tab.
- Resource limits
At most1MiB combined UTF8 string/file bytes,200,000 UTF16 units per string,1,000 batch rows,32 nesting levels and20,000 input nodes; at most4MiB of export files and20 files. Every run ends or is terminated after15 seconds. CSR DER≤64KiB; DKIM headers≤128KiB/1,000 fields/8KiB per field and20,000 mail lines. TypeScript≤20 files,25,000 characters each/100,000 total,20,000 tokens per file,128 syntax levels,100,000 AST nodes and1,000 diagnostics. These are application limits, not a total worker-heap cap. CSV is UTF8, quoted, comma/CRLF, with formula-prefix protection and a declared null marker.
Questions about this local profile
Declared profile
Apply selected RFC 6265bis and Partitioned rules to Set-Cookie lines, a URL, a time and the site or partition context you supply. Case-insensitive prefixes, HTTPS Secure, default Lax and the 400-day expiry are modeled; public-suffix data, browser exceptions and the recent-unsafe grace period are not. Cookie values are omitted, and nothing is set.
Local processing and secrets
Inputs stay in this tab and its terminable worker. No input, secret, filename or contact is sent to a service, stored, logged or measured. Fixed parser/code/metadata assets load from this site only for the selected job. Sensitive inputs have no original-backup button; private exports require an explicit choice and download. Reset or leave the page to release the references; memory erasure cannot be guaranteed by JavaScript. Test-secret fields accept multiple lines and are visible in this tab.
Resource limits
At most1MiB combined UTF8 string/file bytes,200,000 UTF16 units per string,1,000 batch rows,32 nesting levels and20,000 input nodes; at most4MiB of export files and20 files. Every run ends or is terminated after15 seconds. CSR DER≤64KiB; DKIM headers≤128KiB/1,000 fields/8KiB per field and20,000 mail lines. TypeScript≤20 files,25,000 characters each/100,000 total,20,000 tokens per file,128 syntax levels,100,000 AST nodes and1,000 diagnostics. These are application limits, not a total worker-heap cap. CSV is UTF8, quoted, comma/CRLF, with formula-prefix protection and a declared null marker.
Original dependency notices for this local security-tool family, including its TypeScript compiler and libraries. Original license and copyright notices