4 ms·
Not if you set the Domain attribute of the cookie properly, this is a poor software problem, not second-level domain problem.
by Avamander 7y ago
Not if you set the Domain attribute of the cookie properly, this is a poor software problem, not second-level domain problem.
- johannes1234321 7y agoTrue, but simple mitigations can be powerful ... Sidenote: If leaking cookies to your own subdomains is a risk, one might also have other problems already. Point is: I explained the potential risk. Evaluating one has to do oneself