Signing Cookies with Vinyl Cache

Signing Cookies with Vinyl Cache ¶ The Problem: A simple example ¶ Many web applications accept externally set cookies, enabling all kinds of manipulation, from changing the behavior of a website to security exploits: A simple example could be a lang cookie, set to either en or de to render html in either English or German: Understanding the (simple) structure of the cookie, the user interface language can be changed at will, maybe even to unsupported languages which the backend does not implement correctly