From a010555082f7ef5d1568890c13177f6b60b78f98 Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 00:58:10 -0400
Subject: [PATCH 1/4] Update the MCP server

---
 mcp_servers/server.py | 79 ++++++++++++++++++++++++++++++-------------
 1 file changed, 55 insertions(+), 24 deletions(-)

diff --git a/mcp_servers/server.py b/mcp_servers/server.py
index 02814c5d858..51814517918 100644
--- a/mcp_servers/server.py
+++ b/mcp_servers/server.py
@@ -65,8 +65,10 @@
 """
 from __future__ import annotations
 import atexit
+import os
 import sys
 from functools import wraps
+from pathlib import Path
 from typing import Any, Literal
 from mcp.server import MCPServer
 from mcp.server.mcpserver.exceptions import ToolError
@@ -1016,6 +1018,15 @@ def type_text(
     Returns:
         A confirmation message after the operation succeeds;
         otherwise the error handler returns the resulting failure.
+
+    Notes:
+        Including "\\n" in your `text` (except in "set_value" mode) will
+        simulate pressing the "Enter" key, which is useful for submitting
+        forms or triggering search inputs without needing a separate click.
+
+    Tool selection:
+        - Need to update text that appears in a text field -> use this tool.
+        - Need to update the value of a <select> element -> use select_option.
     """
     sb = _get_sb()
 
@@ -1398,11 +1409,13 @@ def assert_condition(
 # Cookies & storage
 # ---------------------------------------------------------------------------
 
-@mcp.tool(title="Manage Cookies")
-# Annotations intentionally omitted: 'get_all' is a pure read, 'clear' is
-# destructive, and 'save'/'load' are file/session I/O -- no single
-# read_only_hint or destructive_hint value would be accurate for the whole
-# tool.
+@mcp.tool(
+    title="Manage Cookies",
+    annotations=ToolAnnotations(
+        idempotent_hint=True,
+        open_world_hint=True,
+    ),
+)
 @handle_sb_errors
 def manage_cookies(
     action: Literal["get_all", "clear", "save", "load"] = "get_all",
@@ -1417,16 +1430,16 @@ def manage_cookies(
 
     Args:
         action:
-            - "get_all": Return all cookies currently available to the browser,
-              including attributes such as name, value, domain, path, expiry,
-              and security flags.
+            - "get_all": Return all cookies currently available to the
+              browser, including attributes such as name, value, domain,
+              path, expiry, and security flags.
             - "clear": Delete all cookies from the current browser session.
-            - "save": Save current cookies to filename. The file may be
-              created or overwritten.
+            - "save": Save current cookies to filename.
             - "load": Load cookies from filename into the current browser
               session.
 
-        filename: Filesystem path used by save/load.
+        filename: The name of the file to save/load cookies from.
+            Will be sanitized and saved in a restricted directory.
             Ignored for get_all and clear.
 
     Returns:
@@ -1440,22 +1453,26 @@ def manage_cookies(
         identifiers, and other private information. Only inspect, save,
         load, or share cookies when explicitly authorized.
 
-        `filename` is passed to SeleniumBase's cookie persistence methods and
-        can access the filesystem available to the MCP server. Use only
-        trusted, authorized paths. The save action may overwrite an existing
-        file.
-
     Notes:
         Loading saved cookies does not guarantee restoration of a login.
         Cookies may be expired, invalidated, domain/path restricted, or
-        dependent on other browser state.
+        dependent on other browser state. Navigate to the relevant site when
+        necessary so the browser has the appropriate origin for the cookies.
 
-    When not to use:
-        - Do not use this tool to load cookies if the cookie origin does
-          not match the origin of the current page.
+    Tool selection:
+        - Need cookies or authentication cookies -> use this tool.
+        - Need localStorage/sessionStorage -> use manage_storage.
+        - Need arbitrary JavaScript or storage operations not covered here ->
+          use run_javascript.
+        - Need visible page content or HTML -> use get_content.
+        - Need an element's HTML attributes -> use get_attributes.
     """
     sb = _get_sb()
 
+    # Define a safe sandbox directory for cookies
+    cookie_dir = Path("./saved_cookies")
+    cookie_dir.mkdir(parents=True, exist_ok=True)
+
     if action == "get_all":
         return sb.get_all_cookies()
 
@@ -1463,13 +1480,27 @@ def manage_cookies(
         sb.clear_cookies()
         return "Cookies cleared."
 
+    # Security: Force isolation to prevent path traversal
+    # (e.g., "../../../etc/passwd")
+    safe_filename = os.path.basename(filename)
+    if not safe_filename.endswith(".txt"):
+        safe_filename += ".txt"
+
+    # Use pathlib's division operator to join paths
+    safe_path = cookie_dir / safe_filename
+
     if action == "save":
-        sb.save_cookies(name=filename)
-        return f"Cookies saved to {filename}"
+        sb.save_cookies(name=str(safe_path))
+        return f"Cookies saved safely to {safe_path.name}"
 
     if action == "load":
-        sb.load_cookies(name=filename)
-        return f"Cookies loaded from {filename}"
+        if not safe_path.exists():
+            return (
+                f"Error: Could not load. {safe_path.name} does not "
+                "exist in the cookie directory."
+            )
+        sb.load_cookies(name=str(safe_path))
+        return f"Cookies loaded from {safe_path.name}"
 
     return (
         f"Error: unknown action '{action}'. "

From 7cac7c15450feb08948c0f178e8abaad7633e037 Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 00:58:38 -0400
Subject: [PATCH 2/4] Update MCP server versioning

---
 mcp_servers/pyproject.toml | 2 +-
 server.json                | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/mcp_servers/pyproject.toml b/mcp_servers/pyproject.toml
index fbeb3d83140..d98522da33f 100644
--- a/mcp_servers/pyproject.toml
+++ b/mcp_servers/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "seleniumbase-mcp"
-version = "1.3.9dev0"
+version = "1.3.10dev0"
 description = "MCP server exposing SeleniumBase CDP Mode as tools for MCP clients."
 readme = "README.md"
 requires-python = ">=3.10"
diff --git a/server.json b/server.json
index ea1f1c60954..7039169d666 100644
--- a/server.json
+++ b/server.json
@@ -3,7 +3,7 @@
   "name": "io.github.seleniumbase/seleniumbase",
   "title": "SeleniumBase MCP",
   "description": "Stealthy browser automation, testing, and web-scraping via CDP Mode.",
-  "version": "4.54.9",
+  "version": "4.54.10",
   "repository": {
     "url": "https://github.com/seleniumbase/SeleniumBase",
     "source": "github"
@@ -13,7 +13,7 @@
     {
       "registryType": "pypi",
       "identifier": "seleniumbase",
-      "version": "4.54.9",
+      "version": "4.54.10",
       "transport": {
         "type": "stdio"
       },

From fae54471dee9f8925e46235075e8d250972bea10 Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 00:58:55 -0400
Subject: [PATCH 3/4] Refresh Python dependencies

---
 requirements.txt | 2 +-
 setup.py         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index f84dce1a07f..cb94e59a6e4 100755
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,7 +11,7 @@ filelock>=4.0.0
 fasteners>=0.20
 mycdp>=1.4.0
 pynose>=1.5.5
-platformdirs>=4.11.9
+platformdirs>=4.11.10
 typing-extensions>=4.16.0
 sbvirtualdisplay>=1.4.0
 MarkupSafe>=3.0.3
diff --git a/setup.py b/setup.py
index 3ca053e04c1..177d9734222 100755
--- a/setup.py
+++ b/setup.py
@@ -177,7 +177,7 @@
         'fasteners>=0.20',
         'mycdp>=1.4.0',
         'pynose>=1.5.5',
-        'platformdirs>=4.11.9',
+        'platformdirs>=4.11.10',
         'typing-extensions>=4.16.0',
         'sbvirtualdisplay>=1.4.0',
         'MarkupSafe>=3.0.3',

From df6fc937aae7e1a7f3bf058609f6e31edde38135 Mon Sep 17 00:00:00 2001
From: Michael Mintz <mdmintz@gmail.com>
Date: Fri, 18 Sep 2026 00:59:13 -0400
Subject: [PATCH 4/4] Version 4.54.10

---
 seleniumbase/__version__.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/seleniumbase/__version__.py b/seleniumbase/__version__.py
index b4b6026e876..ac16604caa5 100755
--- a/seleniumbase/__version__.py
+++ b/seleniumbase/__version__.py
@@ -1,2 +1,2 @@
 # seleniumbase package
-__version__ = "4.54.9"
+__version__ = "4.54.10"