Skip to content

Instantly share code, notes, and snippets.

@shaundon

shaundon/party-cookies.md

Forked from sadams/party-cookies.md
Last active August 29, 2015 14:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save shaundon/03ba0a15e5d47b07c49b to your computer and use it in GitHub Desktop.
Save shaundon/03ba0a15e5d47b07c49b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
party-cookies.md

understanding first/third party cookie behaviour

scenario 1

  1. set cookie from foo.example.com with no domain
  2. is it readable by foo.example.com?
  3. is it readable by bar.example.com?
  4. is it overwritable by bar.example.com?

scenario 2

  1. set cookie from foo.example.com with .example.com domain
  2. is it readable by foo.example.com?
  3. is it readable by bar.example.com?
  4. is it overwritable by bar.example.com?
  5. is it read/write-able by example.com

scenario 3

  1. set 'disalow third party' cookies
  2. include(scenario 1)

scenario 3

  1. set 'disalow third party' cookies
  2. include(scenario 2)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment