Cookie Security Flags: Auditing Secure, HttpOnly, SameSite

Audit session cookies in minutes: read Set-Cookie with curl, verify Secure, HttpOnly, SameSite and __Host- in DevTools, and test fixation and CSRF risks.