Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
portswigger.net