From 7e7ffbc98a797b7341c840a884951dba7e5336a7 Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 01:09:22 -0400
Subject: [PATCH 1/3] Update the CDP MCP server

---
 cdp_server.py | 79 +++++++++++++++++++++++++++++++++++----------------
 1 file changed, 55 insertions(+), 24 deletions(-)

diff --git a/cdp_server.py b/cdp_server.py
index 67e1ddc..5701e62 100644
--- a/cdp_server.py
+++ b/cdp_server.py
@@ -65,8 +65,10 @@
 """
 from __future__ import annotations
 import atexit
+import os
 import sys
 from functools import wraps
+from pathlib import Path
 from typing import Any, Literal
 from mcp.server import MCPServer
 from mcp.server.mcpserver.exceptions import ToolError
@@ -1016,6 +1018,15 @@ def type_text(
     Returns:
         A confirmation message after the operation succeeds;
         otherwise the error handler returns the resulting failure.
+
+    Notes:
+        Including "\\n" in your `text` (except in "set_value" mode) will
+        simulate pressing the "Enter" key, which is useful for submitting
+        forms or triggering search inputs without needing a separate click.
+
+    Tool selection:
+        - Need to update text that appears in a text field -> use this tool.
+        - Need to update the value of a <select> element -> use select_option.
     """
     sb = _get_sb()
 
@@ -1398,11 +1409,13 @@ def assert_condition(
 # Cookies & storage
 # ---------------------------------------------------------------------------
 
-@mcp.tool(title="Manage Cookies")
-# Annotations intentionally omitted: 'get_all' is a pure read, 'clear' is
-# destructive, and 'save'/'load' are file/session I/O -- no single
-# read_only_hint or destructive_hint value would be accurate for the whole
-# tool.
+@mcp.tool(
+    title="Manage Cookies",
+    annotations=ToolAnnotations(
+        idempotent_hint=True,
+        open_world_hint=True,
+    ),
+)
 @handle_sb_errors
 def manage_cookies(
     action: Literal["get_all", "clear", "save", "load"] = "get_all",
@@ -1417,16 +1430,16 @@ def manage_cookies(
 
     Args:
         action:
-            - "get_all": Return all cookies currently available to the browser,
-              including attributes such as name, value, domain, path, expiry,
-              and security flags.
+            - "get_all": Return all cookies currently available to the
+              browser, including attributes such as name, value, domain,
+              path, expiry, and security flags.
             - "clear": Delete all cookies from the current browser session.
-            - "save": Save current cookies to filename. The file may be
-              created or overwritten.
+            - "save": Save current cookies to filename.
             - "load": Load cookies from filename into the current browser
               session.
 
-        filename: Filesystem path used by save/load.
+        filename: The name of the file to save/load cookies from.
+            Will be sanitized and saved in a restricted directory.
             Ignored for get_all and clear.
 
     Returns:
@@ -1440,22 +1453,26 @@ def manage_cookies(
         identifiers, and other private information. Only inspect, save,
         load, or share cookies when explicitly authorized.
 
-        `filename` is passed to SeleniumBase's cookie persistence methods and
-        can access the filesystem available to the MCP server. Use only
-        trusted, authorized paths. The save action may overwrite an existing
-        file.
-
     Notes:
         Loading saved cookies does not guarantee restoration of a login.
         Cookies may be expired, invalidated, domain/path restricted, or
-        dependent on other browser state.
+        dependent on other browser state. Navigate to the relevant site when
+        necessary so the browser has the appropriate origin for the cookies.
 
-    When not to use:
-        - Do not use this tool to load cookies if the cookie origin does
-          not match the origin of the current page.
+    Tool selection:
+        - Need cookies or authentication cookies -> use this tool.
+        - Need localStorage/sessionStorage -> use manage_storage.
+        - Need arbitrary JavaScript or storage operations not covered here ->
+          use run_javascript.
+        - Need visible page content or HTML -> use get_content.
+        - Need an element's HTML attributes -> use get_attributes.
     """
     sb = _get_sb()
 
+    # Define a safe sandbox directory for cookies
+    cookie_dir = Path("./saved_cookies")
+    cookie_dir.mkdir(parents=True, exist_ok=True)
+
     if action == "get_all":
         return sb.get_all_cookies()
 
@@ -1463,13 +1480,27 @@ def manage_cookies(
         sb.clear_cookies()
         return "Cookies cleared."
 
+    # Security: Force isolation to prevent path traversal
+    # (e.g., "../../../etc/passwd")
+    safe_filename = os.path.basename(filename)
+    if not safe_filename.endswith(".txt"):
+        safe_filename += ".txt"
+
+    # Use pathlib's division operator to join paths
+    safe_path = cookie_dir / safe_filename
+
     if action == "save":
-        sb.save_cookies(name=filename)
-        return f"Cookies saved to {filename}"
+        sb.save_cookies(name=str(safe_path))
+        return f"Cookies saved safely to {safe_path.name}"
 
     if action == "load":
-        sb.load_cookies(name=filename)
-        return f"Cookies loaded from {filename}"
+        if not safe_path.exists():
+            return (
+                f"Error: Could not load. {safe_path.name} does not "
+                "exist in the cookie directory."
+            )
+        sb.load_cookies(name=str(safe_path))
+        return f"Cookies loaded from {safe_path.name}"
 
     return (
         f"Error: unknown action '{action}'. "

From 696bb724040f0f602288d5737d76ec710d90ab6c Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 01:09:38 -0400
Subject: [PATCH 2/3] Refresh Python dependencies

---
 requirements.txt | 2 +-
 setup.py         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index c03fd4d..45e57d8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,2 @@
-seleniumbase[mcp]>=4.54.9
+seleniumbase[mcp]>=4.54.10
 mcp[cli]>=2.2.0,<3.0.0
diff --git a/setup.py b/setup.py
index 8752e10..49e9c7b 100755
--- a/setup.py
+++ b/setup.py
@@ -140,7 +140,7 @@
     ],
     python_requires=">=3.10",
     install_requires=[
-        "seleniumbase[mcp]>=4.54.9",
+        "seleniumbase[mcp]>=4.54.10",
         "mcp[cli]>=2.2.0,<3.0.0",
     ],
     extras_require={

From 4fcae4c4a705c950b4657c2bb966ae986b901f05 Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 01:09:50 -0400
Subject: [PATCH 3/3] Version 1.3.10

---
 setup.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup.py b/setup.py
index 49e9c7b..c0339d2 100755
--- a/setup.py
+++ b/setup.py
@@ -70,7 +70,7 @@
 
 setup(
     name="seleniumbase-mcp",
-    version="1.3.9",
+    version="1.3.10",
     description="MCP servers exposing SeleniumBase as tools for MCP clients.",
     long_description=long_description,
     long_description_content_type="text/markdown",