Function _cookie_matches

py/selenium/webdriver/common/api_request_context.py:101–151

Check if a browser cookie should be sent with a request to the given URL. Evaluates expiry, domain, path, and secure attribute matching per RFC 6265. Args: cookie: A cookie dict from driver.get_cookies(). url: The target request URL. default_domain: Fallback domain

(cookie: dict, url: str, default_domain: str = "")

def _cookie_matches(cookie: dict, url: str, default_domain: str = "") -> bool:
    """Check if a browser cookie should be sent with a request to the given URL.

    Evaluates expiry, domain, path, and secure attribute matching per RFC 6265.

    Args:
        cookie: A cookie dict from driver.get_cookies().
        url: The target request URL.
        default_domain: Fallback domain for host-only cookies (no domain attribute).
            When a cookie has no domain, it only matches if the request hostname
            equals this value. If empty and cookie has no domain, the cookie is skipped.

    Returns:
        True if the cookie matches the URL.
    """
    # Expiry check — skip expired cookies
    expiry = cookie.get("expiry")
    if expiry is not None and expiry <= int(time.time()):
        return False

    parsed = urllib.parse.urlparse(url)
    hostname = parsed.hostname or ""
    path = parsed.path or "/"
    scheme = parsed.scheme or "http"

    # Domain matching (RFC 6265 section 5.1.3)
    cookie_domain = cookie.get("domain", "")
    if not cookie_domain:
        # Host-only cookie — must match the origin host exactly
        if not default_domain or hostname != default_domain:
            return False
    elif cookie_domain.startswith("."):
        # .example.com matches example.com and sub.example.com
        if not (hostname == cookie_domain[1:] or hostname.endswith(cookie_domain)):
            return False
    else:
        if hostname != cookie_domain:
            return False

    # Path matching (RFC 6265 section 5.1.4)
    cookie_path = cookie.get("path", "/")
    if cookie_path == "/":
        pass  # root path matches everything
    elif path != cookie_path and not path.startswith(cookie_path + "/"):
        return False

    # Secure matching
    if cookie.get("secure", False) and scheme != "https":
        return False

    return True


def _parse_set_cookie(header_value: str) -> dict: