If you have more than 4K of session data or don‘t want your data to
be visible to the user, pick another session store.
CookieOverflow is raised if
you attempt to store more than 4K of data. TamperedWithCookie is
raised if the data integrity check fails.
A message digest is included with the cookie to ensure data integrity: a
user cannot alter session data without knowing the secret key included in
the hash.
To use Cookie Sessions, set in config/merb.yml
:session_secret_key - your secret digest key
:session_store: cookie