Cookie Bomb or let's break the Internet.

TL;DR I can craft a page "polluting" CDNs, blogging platforms and other major networks with my cookies. Your browser will keep sending those cookies and servers will reject the requests, because Cookie header will be very long. The entire Internet will look down to you. I have no idea if it's a known trick, but I believe it should be fixed. Severity: depends. I checked only with Chrome. We all kno

[nashibao]

クッキーを汚すとか止めてw．Egor Homakov: Cookie Bomb or let's break the Internet.

[tmatsuu]

でかいクッキーを複数食わせて、クッキーが届く範囲のドメインにアクセスできないように嫌がらせができる。あー。Cookie Bombこわい。こっそりやられたらわからんしね。