This page deliberately sets cookies scoped to the shared .llp.uk
parent zone, to test the cookie_scope reputation detector
(lollipop #1727). Host: testingtesting.llp.uk.
| Cookie | Domain attribute | Expected verdict |
|---|---|---|
supercookie_violation | .llp.uk | FLAGGED (parent zone) |
tld_violation | llp.uk | FLAGGED (parent zone) |
host_scoped_ok | (none) | clean |
self_scoped_ok | testingtesting.llp.uk | clean |
The two violating cookies would, in a real deployment, be delivered by the
browser to every other *.llp.uk customer domain — the
cross-tenant leak the detector exists to catch. This is a test fixture only.