A Debian bug report [1] indicated that uzbl would create the cookies storage
file with world readable permissions.  This could allow other local users to
steal cookies if the user had non-default permissions on their home directory
(by default, home directories are mode 0700 but may be 0755 in some cases, like
for Apache user directories).

ls -ld ~/.local/{,share/{,uzbl/{,cookies.txt}}}
drwxr-xr-x 3 user users 4096 Feb  9 23:29 /home/user/.local/
drwxr-xr-x 4 user users 4096 Feb  9 23:29 /home/user/.local/share/
drwxr-xr-x 2 user users 4096 Feb  9 23:29 /home/user/.local/share/uzbl/
-rw-rw-rw- 1 user users  732 Feb  9 23:29 /home/user/.local/share/uzbl/cookies.txt

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659379