[leipert]

Ah thanks! This is new to me. That is indeed a concern, but probably can be worked around, e.g. by proxying requests to third party domains through the same Domain.

[kreetx]

You can't make the browser to send you cookies for other origins so you won't be able to use them from your server.