Restricting the cookies will help to prevent their inadvertent disclosure. This can be most easily accomplished by setting "domain=" attribute of the cookie.