One missing flag on a cookie enables session hijacking, and I almost glossed over it

I am documenting every day of my cybersecurity learning journey publicly. This is Day 5. Previous...