Which cookies reach which layer?
This page sets four cookies in the browser, then asks the cookie-echo service which cookie names it received: once through the Firebase Hosting rewrite on this domain, once straight on its own run.app address. Only names are shown, never values.
| cookie | (a) in the browser document.cookie |
(b) reached cookie-echo through Firebase Hosting |
(c) reached cookie-echo direct on run.app |
|---|
(d) Set-Cookie from the server
…