GNU bug report logs - #81657
32.0.50; url-cookie doesn't permit empty domains for cookies

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Reported by: "Tyler Smith" <tyler@HIDDEN>; dated Wed, 19 Aug 2026 15:29:02 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.

Message received at 81657 <at> debbugs.gnu.org:


Received: (at 81657) by debbugs.gnu.org; 21 Aug 2026 14:38:58 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Aug 21 10:38:58 2026
Received: from localhost ([127.0.0.1]:59630 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1wxQOX-0001Nh-Hn
	for submit <at> debbugs.gnu.org; Fri, 21 Aug 2026 10:38:58 -0400
Received: from fhigh-a8-smtp.messagingengine.com ([103.168.172.159]:34039)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <spwhitton@HIDDEN>)
 id 1wxQOV-0001Mf-59
 for 81657 <at> debbugs.gnu.org; Fri, 21 Aug 2026 10:38:55 -0400
Received: from phl-compute-05.internal (phl-compute-05.internal [10.202.2.45])
 by mailfhigh.phl.internal (Postfix) with ESMTP id E39B71400134;
 Fri, 21 Aug 2026 10:38:49 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163])
 by phl-compute-05.internal (MEProxy); Fri, 21 Aug 2026 10:38:49 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=spwhitton.name;
 h=cc:content-type:content-type:date:date:from:from:in-reply-to
 :in-reply-to:message-id:mime-version:references:reply-to:subject
 :subject:to:to; s=fm2; t=1787323129; x=1787409529; bh=iuuA//fYjU
 g4TapvG0q+7azUOrpUDUknUjwpBEJIL0w=; b=Kg8itPNstFeJm8SuPl9gmdKu1R
 k6wftCJMIK6TQiELrAyOrTj3P2JeCMjwZLrLrZusgPbW2Z9OTnzA1VktL1f5daWp
 ZbRf5cbClMGlIjSycAJc98dAK4xlUZi/Dh0tvyZtMgWrU0IjeQVEnPkyYX89I8SM
 JtK5DiJmhHAuU/OoTEAo5b0aP8XtjdQNiEQrbM5OFX4I70zMzoH27dGJYUj4LCyQ
 soK8wJBmv7VPPaQTjpMAGhc70K0bslyri7AaqmN5FNd4efVqiim/6DF0tteDv3eO
 g9+0Cog005HEQRq9At1/yDXE5D3YpKm/wh4faDezqtDXUx9F52Qo0JcU6FqA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:content-type:date:date
 :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to
 :message-id:mime-version:references:reply-to:subject:subject:to
 :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=
 1787323129; x=1787409529; bh=iuuA//fYjUg4TapvG0q+7azUOrpUDUknUjw
 pBEJIL0w=; b=UiIdpqpS5VKRMRXrDAVgaYDr6Uqfsnyhf6dxnC9Egm1UzCEgaWo
 UCBVjGbxK1y2y49sD+JWLwUi1Bubwrx1NM2SMVu5/FKznE3UuqKcYsap0J81cnjp
 9q3v5U946/RWg58VXxpBXTejcvNLnhkmWLyWIyOrvmgoYAA0YgQ0JRRm8AT9edDY
 vR/ltELVlpv6m44EWS9324fYtBrIF2ABmpj4O+Zx5q30u4FoceaxKWflPAxkgH/n
 zfpyVejcs+RuDn18/lWcLPTbKUdd3pOeeSo/rt2XqNELV/287RDc6JZZpb0GYE4u
 OE88YgMirXdxWGxdJaCCexs0PHCbsFfi5Sg==
X-ME-Sender: <xms:-WKIarEnlPPUVHpStX2ulvco9EbMD8b1rOPfJb0aa8B1yzyx_MNpOw>
 <xme:-WKIavzju5glTubnvkl_D9gv3TD6WztTR9VQvtNd6Oasz_ZohWVd8zw6W7cNrWeBZ
 rhsDCgSJFEujoC10MO6K3dEcdhLOYFfIWEJ4kiFDuBpKcemAeiNXdLb>
X-ME-Received: <xmr:-WKIaqiCor8SLCMp13-Vub4vcPzLZIbXRNu0Fa3Yb9uuOgkrOX7Hu11YopNRp53nnJiDwqq2p1gQVYdsPQpcHb4_lsEmWVOvmg>
X-ME-Proxy-Cause: dmFkZTF1tOskaPX6FnG05G//erLdRzFkD4I6Ytl+AjeTgSOFM2gNAqUAjMwrfLrxf7favg
 PmT4SgDQXobSp6rEgi6ICDaR+SdVlBZlstxLKbi4+jQBYi3G3T4b85tR+N2LQZLVenioPA
 IMOnw16bbSz68Dp8E39shJA4kqMuuUhxlTBqisRXb0UnSHBI1uTSUMMQX6jdVgrPyiptan
 kFaUsu1U0+8Vxgfx7tpsIGXTTnKan7RLtHNM7vXk7J8xiwIbqzw719M9gda68QdYF/97yc
 kbrGE7y48CuwhOvbvPdpMQLIDtoXRlFwfRzB1S0zvYrGpD3wm+DK1XZLJYJv/9KKuBuiFO
 6bLBDGq+IswyqoIZq8+OJFCLukqD5voLqLOZYFUR+ciLhqslFysq+fCc0w/hsgz6kEtQ3Y
 Kpme0kBfmnMwbpaag6u3aaLiXBrahU+2ZsBG19+OtODiQ8f0Cf64uZxHX4C7d7/KngDAJ7
 VAeU2PnSlHa5E6KgTUgU7+4ZRhrQykva2h3lS7dlNf6hBRT4xeVLaIztxRpKlTdJZOJwQi
 F0S9d7iJab7ujpbnB1iGBQHz8ckJ2l/VroIuTy2RATGWtAmPAbokPu1l87lRkq4jFCON3F
 /2RgSJ6VqBOX1gh/XTVzWLcD08x+xsCTyM76tVcwCRAO4ae7YEBMUHxGSB+g
X-ME-Proxy: <xmx:-WKIaiwVP6XN6fW0fKD5XjKroMPgYYqZo74pQ5Ou0gA99_28iVuxrg>
 <xmx:-WKIalIH0x_iS5sOi1wNxuGMFXtASxKNJCqESJPNwPj39hsExOo2bA>
 <xmx:-WKIahRLlwvxor5TBgsQiSVPdHBTM6EWoppHdb2m4Pj-7a4Tua5Yrw>
 <xmx:-WKIalr5IdmYYiCCbmKiYaHV68hiecehELgs9sA98VDGRZKf2QlFBQ>
 <xmx:-WKIalKGL5Qnon8wpR5OVBluPFmm16t1_hiSasZflh46IS9HM9rJRY-A>
Feedback-ID: i62564b17:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri,
 21 Aug 2026 10:38:49 -0400 (EDT)
Received: by athena.silentflame.com (Postfix, from userid 1000)
 id 975B2280E15; Fri, 21 Aug 2026 15:38:48 +0100 (BST)
From: Sean Whitton <spwhitton@HIDDEN>
To: Tyler Smith <tyler@HIDDEN>, 81657 <at> debbugs.gnu.org, Amin Bandali
 <bandali@HIDDEN>
Subject: Re: bug#81657: 32.0.50; url-cookie doesn't permit empty domains for
 cookies
In-Reply-To: <5a5d5296-fe57-43d5-a6f0-d09aedf2f5c2@HIDDEN>
References: <5a5d5296-fe57-43d5-a6f0-d09aedf2f5c2@HIDDEN>
Date: Fri, 21 Aug 2026 15:38:48 +0100
Message-ID: <87pkzbmtc7.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81657
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Tyler Smith [19/Aug 11:28am -04] wrote:
> Eww uses the url-cookie.el library to manage cookies, and this file
> doesn't allow for cookies that set an empty domain value. Steps to
> reproduce and a (naive) fix below:
>
> To reproduce:
>
> - Browse to the site https://kagi.com/login using the eww browser
> - Enter name and password, and submit
> - EWW displays a '403 Forbidden' warning and I am not logged into the
>   site. This is due to the session cookie not being set.
>
> Further discussion of this issue is reported here:
>
> https://kagifeedback.org/d/8055-kagi-search-unable-to-login-using-eww-browser/11

Thanks.  Adding Amin.

-- 
Sean Whitton




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81657; Package emacs. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 19 Aug 2026 15:28:52 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Aug 19 11:28:51 2026
Received: from localhost ([127.0.0.1]:37279 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1wwiDi-0007hh-Tk
	for submit <at> debbugs.gnu.org; Wed, 19 Aug 2026 11:28:51 -0400
Received: from lists1p.gnu.org ([2001:470:142::17]:50444)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <tyler@HIDDEN>)
 id 1wwiDg-0007h7-U3
 for submit <at> debbugs.gnu.org; Wed, 19 Aug 2026 11:28:49 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <tyler@HIDDEN>)
 id 1wwiDb-0003rB-FO
 for bug-gnu-emacs@HIDDEN; Wed, 19 Aug 2026 11:28:43 -0400
Received: from fout-a1-smtp.messagingengine.com ([103.168.172.144])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <tyler@HIDDEN>)
 id 1wwiDY-0006wm-AP
 for bug-gnu-emacs@HIDDEN; Wed, 19 Aug 2026 11:28:43 -0400
Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46])
 by mailfout.phl.internal (Postfix) with ESMTP id 2279FEC018E
 for <bug-gnu-emacs@HIDDEN>; Wed, 19 Aug 2026 11:28:38 -0400 (EDT)
Received: from phl-imap-01 ([10.202.2.91])
 by phl-compute-06.internal (MEProxy); Wed, 19 Aug 2026 11:28:38 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=plantarum.ca; h=
 cc:content-transfer-encoding:content-type:content-type:date:date
 :from:from:in-reply-to:message-id:mime-version:reply-to:subject
 :subject:to:to; s=fm2; t=1787153318; x=1787239718; bh=9cOL7RQ+ky
 JoDTSH8KtlF/X+fPMWKgrXJsk1yKAGGpg=; b=n1MMMNyn98sxLddbCuRvGWT4Ia
 TvB8dwUQcTgmS17jU+NWEAA0yKosmjL+ReIMQE1yzxGBvS0kwWb1sBirGJpJjYCE
 2Fpl8p81vMSFu3VVtVmEfcmSjyh0zEuK0CkPkxyuMpJ6y0RlxRzWS5ZYHdvQj402
 ENpJb85kZi1mETKVHIz9J+kTND8yfQXiJKGZsEns115UGGI2pjbQ4DzfGyhCiYVp
 ftnP+zJ+qmg8VGfbJAxvzo9aGsz5TkgBaYzLi/elLQKifsUrOrbVzsNuSl4SnalS
 kvEwAGn1vmhv1r/Vlg7sHZAMWolv4qcVx+cB+19bJcTuKvFw7LBhOvn5MswQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :content-type:date:date:feedback-id:feedback-id:from:from
 :in-reply-to:message-id:mime-version:reply-to:subject:subject:to
 :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=
 1787153318; x=1787239718; bh=9cOL7RQ+kyJoDTSH8KtlF/X+fPMWKgrXJsk
 1yKAGGpg=; b=Y7sHzmWe9JuTG74hPqMlgcTaWKAjIpIE5YRnv+bHXDzTbVGmAsV
 zViclGRd3D/z3jNHQkb711cauigWw71bFkJM1Rz2PM4ZTxikQBGPWe/64Bvyk/7+
 qPl3wuv88fZrlFGe95Uaz/z7MhI/G1Xl3FyfdwPqXrpfr9Ku9F0OOJXfLp+XPa3t
 CtE0NFyLmWepi8e5wiQdib44WGiz2NLRdC9cbu3q4q42X1ocObqyjq5M++GvO1x2
 OuX2ZVs+ATgOsoGaDGeaLMd/dv8UYxcVr8oEWxyocAMh/y/nK3g4nYxKCtJ/mDhv
 dpU9618HhodaRYVit3HD96N/wBjP+S7qC1Q==
X-ME-Sender: <xms:pcuFak9IuBlPNyd9QFIpyTRIoZEGamjNSv8l09thBkXdUFYWbqgyoQ>
 <xme:pcuFaniX0IpbMvh3ZBl2DA3Z7JKwhj32KAiKPSO5KwBXo-g3IZ3pKTENaDe3o1DJ7
 hoz2_zbtZ6FkwKLXfpOpETGkj5aEzrQI-pDopjwVLTEq7oJ4n4-cg>
X-ME-Proxy-Cause: dmFkZTGtuhw6nN1dBqzLvMP969v5H6B/wA39GYB6r14CLV+WBVfGsFmUXuohOYLTmOKuqk
 TY5MKHWIGDac2DCbFmznt3uC6cXqX2EjBwNasEZaJmiuHzCzLeybU16nDA3Y4iST6bJEWK
 G4JKKrzr5S907of0eme8kCAIZSMKG4tulvu1V6p/HIrllympFxu7Gl+waGyQrSRJm4ZuBt
 Z6aTGVTSbm0H82yuABBt2vvwXJgPWf8ELEnUo9oOATycH8mWSoiSxtJIcDkpXW19jESoj7
 zd28EvqxMdRDHHtI9HoiTfRw6G1B+2KZKJjEY8cQKy//KbPrOJ+uMFqFp58/nSe8ipo4UQ
 TRZ2JpRh4lzGsRrCZEEbhQLmZkalelPbCT4VszxpojU0HfEKdlQkh+6IuUZ55/rG9SzWnW
 IGGYMeBBrqUbkwk+CzyyzlHfgJO/tqdBs6map4r7RZ0mrGj8hJIBCvfQW6D5nCQu5KkQnz
 bS9/xVNOOge2/yaTfAyMKuZC0k3ZJOpoWTS3Cmou6wdEvCEsaXV/qUfriR4pnG+kUtHjiz
 vPxbBbd7KMof1Nal24zpVqErfuQupUnvUU/HOdKo+Fs2xM4Z726zPr4KCFDeiXZOIpnNUN
 ZJjTU2xlsgmTCwp16DG3NN+4cRdVrhhQhO6tOKAw//RjqnoAiF4a1oh1zINA
X-ME-Proxy: <xmx:pcuFakgucza4bf12KVMhmR5pWmPCelwbYGVAvcgaB_jCTEfHS5djzQ>
 <xmx:pcuFaj95n2sWtArIMIGvl8a8jqkFs599Cv5e3I7SrrI2gu8eiv1Bbg>
 <xmx:pcuFahulC_7gc5UmrT_TqjUmjSaQ_sxYnEMruqHpM-WYTYeuZxfsDA>
 <xmx:pcuFaqYPpahGREpXw2tnnrC0oB5Dho3rNPaY40efCI4kijoKlfoanA>
 <xmx:psuFau5utJ_zLcw9S2fBxBjyvtBsS5DoFUq02D5OxNPorHQZK5mnvv4s>
Feedback-ID: i14ac40e7:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501)
 id CF8CB18C0067; Wed, 19 Aug 2026 11:28:37 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
Date: Wed, 19 Aug 2026 11:28:17 -0400
From: "Tyler Smith" <tyler@HIDDEN>
To: bug-gnu-emacs@HIDDEN
Message-Id: <5a5d5296-fe57-43d5-a6f0-d09aedf2f5c2@HIDDEN>
Subject: 32.0.50; url-cookie doesn't permit empty domains for cookies
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Received-SPF: pass client-ip=103.168.172.144; envelope-from=tyler@HIDDEN;
 helo=fout-a1-smtp.messagingengine.com
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.7 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.3 (/)

Eww uses the url-cookie.el library to manage cookies, and this file
doesn't allow for cookies that set an empty domain value. Steps to
reproduce and a (naive) fix below:

To reproduce:

- Browse to the site https://kagi.com/login using the eww browser
- Enter name and password, and submit
- EWW displays a '403 Forbidden' warning and I am not logged into the
  site. This is due to the session cookie not being set.

Further discussion of this issue is reported here:

https://kagifeedback.org/d/8055-kagi-search-unable-to-login-using-eww-browser/11

To fix:

I did some investigating, and found that url-cookie explicitly rejects
cookies with a domain set to the empty string "". This is hard-coded in
the following function:

(defun url-cookie-host-can-set-p (host domain)
  (cond
   ((string= host domain)	; Apparently netscape lets you do this
    t)
   ((zerop (length domain))
    nil)
   (t
    ;; Remove the dot from wildcard domains before matching.
    (when (eq ?. (aref domain 0))
      (setq domain (substring domain 1)))
    (and (url-domsuf-cookie-allowed-p domain)
         (string-suffix-p domain host 'ignore-case)))))

Changing the `zerop` clause to return `t` (or maybe just removing it
entirely?) allows the site to set the cookie. However, storing a cookie
with an empty domain causes problems elsewhere, as the code that
retrieves cookies expects each cookie to have a non-empty domain
set. This can be fixed by modifying the url-cookie-handle-set-cookie
function to use the host value for cookies that set an empty domain. 
This is already done in cases where the domain is missing entirely, not
just empty.

(defun url-cookie-handle-set-cookie (str)
    (setq url-cookies-changed-since-last-save t)
    (let* ((args (nreverse (url-parse-args str t)))
	   (case-fold-search t)
	   (secure (and (assoc-string "secure" args t) t))
	   (domain (or (cdr-safe (assoc-string "domain" args t))
		       (url-host url-current-object)))
	   (current-url (url-view-url t))
	   (trusted url-cookie-trusted-urls)
	   (untrusted url-cookie-untrusted-urls)
	   (max-age (cdr-safe (assoc-string "max-age" args t)))
	   (localpart (or (cdr-safe (assoc-string "path" args t))
			  (file-name-directory
			   (url-filename url-current-object))))
	   (expires nil))
      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;     
      ;;; swap in the host in place of empty domains ;;;
      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
      (if (string= domain "")
          (setq domain (url-host url-current-object)))
          
      (if (and max-age (string-match "\\`-?[0-9]+\\'" max-age))
	  (setq expires (ignore-errors
                          (format-time-string "%a %b %d %H:%M:%S %Y GMT"
					      (time-add nil (read max-age))
					      t)))
        (setq expires (cdr-safe (assoc-string "expires" args t))))
      (while (consp trusted)
        (if (string-match (car trusted) current-url)
	    (setq trusted (- (match-end 0) (match-beginning 0)))
	  (pop trusted)))
      (while (consp untrusted)
        (if (string-match (car untrusted) current-url)
	    (setq untrusted (- (match-end 0) (match-beginning 0)))
	  (pop untrusted)))
      (and trusted untrusted
	   ;; Choose the more specific match.
	   (if (> trusted untrusted) (setq untrusted nil) (setq trusted nil)))
      (cond
       (untrusted
        ;; The site was explicitly marked as untrusted by the user.
        nil)
       ((or (eq url-privacy-level 'paranoid)
	    (and (listp url-privacy-level) (memq 'cookies url-privacy-level)))
        ;; User never wants cookies.
        nil)
       ((and url-cookie-confirmation
	     (not trusted)
	     (save-window-excursion
	       (with-output-to-temp-buffer "*Cookie Warning*"
	         (princ (format "%s=\"%s\"\n" (caar args) (cdar args)))
	         (dolist (x (cdr args))
		   (princ (format "  %s=\"%s\"\n" (car x) (cdr x)))))
	       (prog1
		   (not (funcall url-confirmation-func
			         (format "Allow %s to set these cookies? "
				         (url-host url-current-object))))
	         (if (get-buffer "*Cookie Warning*")
		     (kill-buffer "*Cookie Warning*")))))
        ;; User wants to be asked, and declined.
        nil)
       ((url-cookie-host-can-set-p (url-host url-current-object) domain)
        ;; Cookie is accepted by the user, and passes our security checks.
        (url-cookie-store (caar args) (cdar args)
			  expires domain localpart secure))
       (t
        (url-lazy-message "%s tried to set a cookie for domain %s - rejected."
			  (url-host url-current-object) domain)))))

This solves the problem for me, but I'm not familiar with EWW, url et al
so don't know if this is a good general solution.

Thanks,

- tyler


In GNU Emacs 32.0.50 (build 1, x86_64-pc-linux-gnu, GTK+ Version
 3.24.41, cairo version 1.18.0) of 2026-05-11 built on
 ONOTTRA825833PL.agr.gc.ca
Repository revision: 66729f3e5080f8853393e5f88ce6f062b45164b7
Repository branch: master
Windowing system distributor 'The X.Org Foundation', version 11.0.12101011
System Description: Ubuntu 24.04.4 LTS

Configured using:
 'configure --without-compress-install --with-native-compilation
 --with-mailutils --with-tree-sitter'

Configured features:
ACL CAIRO DBUS FREETYPE GIF GLIB GMP GNUTLS GPM GSETTINGS HARFBUZZ JPEG
LCMS2 LIBOTF LIBSYSTEMD LIBXML2 M17N_FLT MODULES NATIVE_COMP NOTIFY
INOTIFY PDUMPER PNG RSVG SECCOMP SOUND SQLITE3 THREADS TIFF
TOOLKIT_SCROLL_BARS TREE_SITTER WEBP X11 XDBE XIM XINERAMA XINPUT2 XPM
XRANDR GTK3 ZLIB

Important settings:
  value of $LANG: en_US.UTF-8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix

Major mode: eww

Minor modes in effect:
  tooltip-mode: t
  global-eldoc-mode: t
  eldoc-mode: t
  show-paren-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  minibuffer-nonselected-mode: t
  minibuffer-regexp-mode: t
  buffer-read-only: t
  line-number-mode: t
  indent-tabs-mode: t
  transient-mark-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t

Load-path shadows:
None found.

Features:
(shadow sort mail-extr compile comint ansi-osc ansi-color ring emacsbug
lisp-mnt message yank-media dired dired-loaddefs rfc822 mml mml-sec epa
derived epg rfc6068 epg-config mm-decode mm-bodies mm-encode mailabbrev
gmm-utils mailheader sendmail textsec uni-scripts idna-mapping
ucs-normalize uni-confusable textsec-check cl-extra help-mode gnutls
network-stream url-http mail-parse rfc2231 rfc2047 rfc2045 ietf-drums
url-gw nsm url-cache url-auth format-spec comp-run bytecomp byte-compile
comp-common rx eww track-changes vtable url-queue thingatpt shr
pixel-fill kinsoku url-file svg xml dom browse-url xdg url url-proxy
url-privacy url-expand url-methods url-history url-cookie
generate-lisp-file url-domsuf url-util url-parse auth-source cl-seq
eieio eieio-core cl-macs gv icons password-cache json map url-vars
mailcap puny mm-url gnus nnheader gnus-util text-property-search
time-date subr-x mule-util mail-utils range wid-edit mm-util mail-prsvr
cl-loaddefs cl-lib rmc iso-transl tooltip cconv eldoc paren electric
uniquify ediff-hook vc-hooks lisp-float-type elisp-mode mwheel
term/x-win x-win term/common-win x-dnd touch-screen tool-bar dnd fontset
image regexp-opt fringe tabulated-list replace newcomment text-mode
lisp-mode prog-mode register page tab-bar menu-bar rfn-eshadow isearch
easymenu timer select scroll-bar mouse jit-lock font-lock syntax
font-core term/tty-colors frame minibuffer nadvice seq simple cl-generic
indonesian philippine cham georgian utf-8-lang misc-lang vietnamese
tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
composite emoji-zwj charscript charprop case-table epa-hook
jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs
theme-loaddefs faces cus-face macroexp files window text-properties
overlay sha1 md5 base64 format env code-pages mule custom widget keymap
hashtable-print-readable backquote threads dbusbind inotify lcms2
dynamic-setting system-font-setting font-render-setting cairo gtk
x-toolkit xinput2 x multi-tty move-toolbar make-network-process
tty-child-frames native-compile emacs)

Memory information:
((conses 16 259613 15265) (symbols 48 11442 0) (strings 32 47271 2763)
 (string-bytes 1 1159997) (vectors 16 40073)
 (vector-slots 8 540489 19471) (floats 8 70 278)
 (intervals 56 1319 193) (buffers 1064 14))


-- 
plantarum.ca




Acknowledgement sent to "Tyler Smith" <tyler@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#81657; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Fri, 21 Aug 2026 14:45:01 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.