New Cookie Sandwich Technique Allows Stealing of HttpOnly Cookies

The attack leverages differences in how web servers, frameworks, and browsers handle cookies based on legacy standards such as RFC2109, in contrast to the modern RFC6265 standard.