// GLOSSARY

Cookie tossing and shadowing

Setting a domain-wide cookie from a controlled subdomain to overwrite the application's own value (fixation) or to have a second cookie with the same name delivered alongside it (shadowing). The parser on the server side decides which value wins by its own rule.