Don’t allow sites to set two-component domains with country-code top-level domains like .co.uk, .gov.uk, .co.nz.etc. This is far from perfect and isn’t guaranteed to work!
http.cookiejar/DefaultCookiePolicy.strict_domain
DefaultCookiePolicy.strict_domain