The http.cookies module for cookie parsing. SimpleCookie accepts raw Cookie headers — the parsed morsels carry user input. Setting a cookie without Secure / HttpOnly / SameSite is a common hardening finding.
.SimpleCookie().SimpleCookie()Sourcehttp.cookies.SimpleCookie(input=None) -> SimpleCookie
Parses a Cookie header. Parsed morsels are sources.
return.Morsel()Neutralhttp.cookies.Morsel() -> Morsel
Represents one cookie. Finding when secure/httponly/samesite flags are not set.
| FQN | Field | |
|---|---|---|
| http.cookies | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyHttpCookies