OWASPASVS 5.0 requirement
ASVS-V3.3.3 Cookies have the '__host-' prefix for the cookie name unless they are explicitly designed to be shared with other hosts.
- Standard
- OWASP ASVS 5.0
- Chapter
- V3 Web Frontend Security
- Section
- V3.3 Cookie Setup
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that cookies have the '__Host-' prefix for the cookie name unless they are explicitly designed to be shared with other hosts.