Cypress sets explicit domain cookies during cy.visit incorrectly

[brian-mann]

Taken from here: bahmutov/express-sessions-tutorial#4

During a cy.visit or cy.request Cypress internally sets cookie values directly on the browser using the appropriate automation API's.

However there is an edge case where when Cypress receives a non domain based cookie it will incorrectly set the domain property on the cookie causing the cookie to be set as an explicit domain based cookie.

This has the effect of "doubling" cookies in the browser when the origin under test is not localhost.

These cookies are called hostOnly cookies, and the domain property should be omitted when setting cookies.

You can see this happening here:

describe("Domain Cookies", function(){
  Cypress.Cookies.debug(true)

  it("doubles the cookies", function(){
    cy.visit("http://66f9dab4.ngrok.io").getCookies()
  })
})

[brian-mann]

Fixed in 0.17.2.