Prototype pollution in cookie jar construction

A cookie whose domain is `__proto__` is stored under that key in the in-memory jar, mutating the prototype shared by every subsequent lookup.

SyntheticThis advisory is invented for the demonstration. tough-cookie is a real package; nothing described here has been reported against it.