You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Gate live browser cookie test behind opt-in - #902
browser::cookies::tests::test_cookie_extraction ran in every cargo test. It read and decrypted real claude.ai cookies from the machine's installed browsers and printed the first 20 characters of each value.
The test is now #[ignore] (same pattern as providers/claude/accounts.rs) and also returns early unless CODEXBAR_LIVE_COOKIE_TEST=1 is set, so --ignored runs skip it too unless you opt in.
It prints the cookie count and names only. Values are never printed.
No CI script runs --ignored / --include-ignored or sets the variable, so the test no longer runs in CI or in normal local runs.
Not changed, listed for later: browser/detection.rstest_browser_detection reads real browser profile directories (paths and profile counts, no cookies).
Commands run
cargo test --manifest-path rust/Cargo.toml browser: 129 passed, 1 ignored (test_cookie_extraction)
cargo fmt --all: clean
cargo clippy on both manifests with -D warnings: clean
UI proof
Not applicable: test-only change.
Summary by CodeRabbit
Tests
The live cookie extraction test is skipped by default and can be enabled with an environment setting.
Test output reports cookie names without exposing cookie values.
Reviewing files that changed from the base of the PR and between 1170520 and 5764cf1.
📒 Files selected for processing: 1
rust/src/browser/cookies.rs
Included review availability: This review used your included allowance. Your plan provides up to 4 included reviews per hour; 1 remain after this review.
📝 Walkthrough
The live claude.ai cookie test is ignored by default. It runs when CODEXBAR_LIVE_COOKIE_TEST=1 and reports cookie names without printing values or value prefixes.
Changes: Live cookie test
Layer / File(s)
Summary
Opt-in test and output rust/src/browser/cookies.rs
The live cookie test requires CODEXBAR_LIVE_COOKIE_TEST=1. Its output includes cookie names only.
Live cookie access is excluded from normal test and CI runs, while maintainers can opt in explicitly. The test no longer prints cookie values, and no merge-blocking risk is evident.
Pre-merge checks: 8
Check name
Status
Explanation
Description Check
Check skipped - CodeRabbit’s high-level summary is enabled.
Title check
The title is a short imperative summary that accurately describes gating the live browser cookie test behind opt-in execution.
Linked Issues check
Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check
Check skipped because no linked issues were found for this pull request.
Provider Data Stays Siloed
PASS. The pull request changes only the live cookie test in rust/src/browser/cookies.rs. It adds an opt-in environment check, marks the test ignored, and changes output from cookie name/value prefix…
Secrets Handled Safely
The pull request removes the live test's cookie-value output. The changed test now logs only a count, cookie names, a fixed opt-in message, or CookieError text; it no longer prints any cookie value …
No Unapproved Dependencies
The pull request changes only rust/src/browser/cookies.rs. It does not change any Cargo.toml, package.json, npm or yarn lockfile, or pnpm packageManager version. No dependency addition require…
Ui Changes Include Windows Proof
The pull request changes only the live test in rust/src/browser/cookies.rs. It does not modify desktop UI files, tray rendering, the float bar, settings, or window chrome. The PR description correct…
Full details: Provider Data Stays Siloed
Explanation
PASS. The pull request changes only the live cookie test in rust/src/browser/cookies.rs. It adds an opt-in environment check, marks the test ignored, and changes output from cookie name/value prefixes to cookie names only. It does not add provider or account identity handling, cross-provider UI/payload/storage behavior, or cross-provider branching.
Full details: Secrets Handled Safely
Explanation
The pull request removes the live test's cookie-value output. The changed test now logs only a count, cookie names, a fixed opt-in message, or CookieError text; it no longer prints any cookie value or prefix. The test is also ignored by default and requires CODEXBAR_LIVE_COOKIE_TEST=1. The diff introduces no credential-file or keyring deletion or overwrite.
Full details: No Unapproved Dependencies
Explanation
The pull request changes only rust/src/browser/cookies.rs. It does not change any Cargo.toml, package.json, npm or yarn lockfile, or pnpm packageManager version. No dependency addition requires approval.
Full details: Ui Changes Include Windows Proof
Explanation
The pull request changes only the live test in rust/src/browser/cookies.rs. It does not modify desktop UI files, tray rendering, the float bar, settings, or window chrome. The PR description correctly states that UI proof is not applicable.
✨ Finishing Touches
📝 Generate docstrings
Commit to this branch
Create a new PR
🧪 Generate unit tests (beta)
Commit to this branch
Create a new PR
Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
browser::cookies::tests::test_cookie_extractionran in everycargo test. It read and decrypted realclaude.aicookies from the machine's installed browsers and printed the first 20 characters of each value.#[ignore](same pattern asproviders/claude/accounts.rs) and also returns early unlessCODEXBAR_LIVE_COOKIE_TEST=1is set, so--ignoredruns skip it too unless you opt in.No CI script runs
--ignored/--include-ignoredor sets the variable, so the test no longer runs in CI or in normal local runs.Not changed, listed for later:
browser/detection.rstest_browser_detectionreads real browser profile directories (paths and profile counts, no cookies).Commands run
cargo test --manifest-path rust/Cargo.toml browser: 129 passed, 1 ignored (test_cookie_extraction)cargo fmt --all: cleancargo clippyon both manifests with-D warnings: cleanUI proof
Not applicable: test-only change.
Summary by CodeRabbit