News for hackers. Stuff that matters.

A comment on PSA: Always use a separate domain for user content. Parent comment

Re:PSA: Always use a separate domain for user content by bawolff on Friday October 10, 2025 @07:16PM (#45544913)
> My cookies are scoped to my own subdomain

If you mean with the domain option, that's not really sufficient. You need to use the Host- prefix

[ Parent | on HN ]

There are no comments on this comment yet.