• Setting cookie and leaking it in the HTML body
  • Setting cookie and leaking it in a resource