Thanks, this was very informative. I wonder how the pull requests for the public suffix domains are being checked. Can somebody use it as an attack surface by

Thanks, this was very informative. I wonder how the pull requests for the public suffix domains are being checked. Can somebody use it as an attack surface by adding the victim's domain in that list and effectively blocking their website from setting cookies?