Halowerk Schild – CSP Cookie Header Checker

Use this endpoint when you specifically need to audit or validate the Content Security Policy (CSP) HTTP header as it applies to cookie objects on a public web URL. Prefer this over generic HTTP header checkers when you need a structured, machine-readable CSP cookie finding for security audits, compliance checks, or automated web security monitoring pipelines.

• Target URL is unreachable or returns a non-200 status — endpoint may return an error or empty finding
• URL is not publicly accessible (e.g. behind a firewall or auth wall) — cannot inspect headers
• Malformed URL input causes validation error
• CSS selector matches zero or multiple elements — first match used or error returned
• No CSP header present on the cookie object — finding reflects absence