salesforce Tough Cookie Vulnerabilities