We look at 2 examples of third-party HTTP cookies and 1 example of javascript. It's both, you have to defend on a complex terrain.