Path

Meaning

The Path attribute limits a cookie to requests whose URL path starts with the given value. Path=/admin covers /admin and /admin/users but not /blog. If Path is omitted, MDN explains that it defaults to the directory part of the URL that set the cookie, so a cookie set from /docs/Web/HTTP/index.html gets /docs/Web/HTTP/. Setting Path=/ explicitly is the clearest choice for most cookies. Path reduces traffic but is not a security boundary, because other paths on the same origin can still read non-HttpOnly cookies with script. See also: Domain, Host-only cookie, the guide "Domain, Path, Expires and Max-Age Explained".