Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.30%. Comparing base (bc24dc1) to head (ace7881).
✅ All tests successful. No failed tests found.

@@           Coverage Diff           @@
##             3.15   #13675   +/-   ##
=======================================
  Coverage   96.29%   96.30%           
=======================================
  Files         161      161           
  Lines       52233    52267   +34     
  Branches     2872     2872           
=======================================
+ Hits        50300    50334   +34     
  Misses       1752     1752           
  Partials      181      181           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

Confidence Score: 5/5

No blocking failure remains.

The exercised expiration, path-specific persistence, and explicit-domain replacement flows behave correctly in the updated cookie jar.

Comments Outside Diff (1)

1. General comment

   Host-only marker was keyed too broadly, corrupting cookies sharing a name and domain

   • Bug
     • On base bc24dc15, a Domain cookie at /attacker with Max-Age=0 clears the host-only marker for a root host-only cookie of the same name; the root cookie is then sent to evil.auth.example.com. The same two-part marker also makes save/load and explicit Domain replacement incorrectly apply host-only state across different paths.
   • Cause
     • The previous host-only identity was (domain, name) rather than the cookie identity (domain, path, name).
   • Fix
     • ace78817 updates host-only marker creation, deletion, filtering, persistence, and explicit-Domain replacement to use (domain, path, name). It also reloads through update_cookies() while retaining the persisted morsel path.

   _{Ran code and verified through T-Rex}

_{Reviews (2): Last reviewed commit: "Apply batched suggestions from code revi..." | Re-trigger Greptile}

Merging this PR will not alter performance

✅ 94 untouched benchmarks
⏩ 86 skipped benchmarks¹

_{Comparing patchback/backports/3.15/9332972cfcb0f5a2b6677e7307819ab8f13b5d09/pr-13674 (ace7881) with 3.15 (bc24dc1)}