Skip to content

Commit aeb03af

Browse files
committed
docs: add security note for non-secure cookie handling in WebDriver
- Added comments to clarify the intentional allowance of non-secure cookies for testing flexibility in the WebDriver implementation. - Emphasized that this approach is necessary to support both secure and non-secure cookie scenarios as per the WebDriver specification.
1 parent 38b7ab3 commit aeb03af

File tree

1 file changed

+4
-0
lines changed
  • packages/tauri-plugin-webdriver/src/platform

1 file changed

+4
-0
lines changed

packages/tauri-plugin-webdriver/src/platform/executor.rs

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1887,6 +1887,10 @@ fn webdriver_cookie_to_tauri(cookie: &Cookie) -> TauriCookie<'static> {
18871887
builder = builder.domain(domain.clone());
18881888
}
18891889

1890+
// SECURITY: Intentionally allows non-secure cookies for test flexibility.
1891+
// This WebDriver implementation must support testing both secure and non-secure
1892+
// cookie scenarios per the WebDriver specification. Test code controls cookie
1893+
// creation, not untrusted external sources.
18901894
if cookie.secure {
18911895
builder = builder.secure(true);
18921896
}

0 commit comments

Comments
 (0)