Web Security: Common Vulnerabilities And Their Mitigation - Session ids using hidden form fields and cookies

The video tutorial explores various methods of transmitting session IDs, including URL parameters, hidden form fields, and cookies. It highlights the impracticality of certain attacks, such as using hidden form fields, and explains how cookies are the standard method for session ID transmission. The tutorial also covers cross-site scripting, domain-level cookies, meta tags, and header injection as techniques for setting session IDs, emphasizing the challenges and risks associated with each method.

What is the significance of domain-level cookie setting from subdomains in the context of session IDs?

Explain how a meta tag can be used to set a session ID in a cookie.