Need to pass cookie information to a child iFrame - Are there any security concerns?
My Answer (best guess)


Tag is correct, out of security concer i would still not pass the session id as parameter(only if there is no other way)
It makes it harder to tamper with, if it is httplony see wikipedia
Links with sessionids could be bookmarked and after the end of the session they wont work, or they could beforwarded, and sesssions could be passed/shared, ... 


Btw.: i found this link https://security.stackexchange.com/questions/14093/why-is-passing-the-session-id-as-url-parameter-insecure covering more or less the same topic.

I hope it helps