4 ms·
The *.example.com cookie is the problem. A malicious subdomain under example.com will get that cookie and can use it to impersonate users.
by cdjk 6y ago
The *.example.com cookie is the problem. A malicious subdomain under example.com will get that cookie and can use it to impersonate users.