Safari can hand a signed-in session to a local tool.
Version 1.35.0 ·
It reads a site's cookies, HttpOnly ones included, only for the sites you list, and never shows a value to the agent.
Share this release
Safari can hand a signed-in session to a local tool. It reads a site's cookies, HttpOnly ones included, only for the sites you list, and never shows a value to the agent. https://cupertino.mgcrea.io/changelog/1.35.0/
Added
Safari reads a site's cookies, for the sites you list.
apple_safari_cookieslists the cookies Safari would send to an open page, HttpOnly ones included, with each one's name, domain, path, flags and expiry, and never its value. To hand a session to a local tool, it writes the cookies you name to a private file (mode 0600) as one Cookie header value. Turn it on in Safari's settings in Cupertino with Read cookies, and list the sites it may read in the Sites field under it, likeyahoo.com: an empty list refuses every site. Saving the file also needs writes. Outside the app, the same isAPPLE_SAFARI_ALLOW_COOKIESandAPPLE_SAFARI_COOKIE_HOSTS.The Safari extension asks for the cookies permission, which the tool above reads through. It adds no all-sites access: cookies are read only on sites you have already allowed the extension on.