[py] Align _cookie_matches domain and path matching with RFC 6265

1. In domain matching, strip any optional leading dot per RFC 6265 §5.1.3
   so cookies with domain 'example.com' match subdomains (e.g. sub.example.com).
2. Canonicalize cookie domain and request hostname to lowercase for
   case-insensitive domain matching.
3. In path matching, handle cookie paths with trailing slashes (e.g. /docs/)
   so that subpaths (e.g. /docs/page) match correctly instead of attempting
   a prefix match against double slashes (/docs//).

Author: saiyam-jain-dev

py/selenium/webdriver/common/api_request_context.py

@@ -119,29 +119,33 @@ def _cookie_matches(cookie: dict, url: str, default_domain: str = "") -> bool:
         return False
 
     parsed = urllib.parse.urlparse(url)
-    hostname = parsed.hostname or ""
+    hostname = (parsed.hostname or "").lower()
     path = parsed.path or "/"
     scheme = parsed.scheme or "http"
 
     # Domain matching (RFC 6265 section 5.1.3)
-    cookie_domain = cookie.get("domain", "")
+    cookie_domain = (cookie.get("domain") or "").lower()
     if not cookie_domain:
-        # Host-only cookie — must match the origin host exactly
-        if not default_domain or hostname != default_domain:
-            return False
-    elif cookie_domain.startswith("."):
-        # .example.com matches example.com and sub.example.com
-        if not (hostname == cookie_domain[1:] or hostname.endswith(cookie_domain)):
+        # Host-only cookie - must match the origin host exactly
+        if not default_domain or hostname != default_domain.lower():
             return False
     else:
-        if hostname != cookie_domain:
+        # Strip optional leading dot per RFC 6265 section 5.1.3
+        norm_domain = cookie_domain[1:] if cookie_domain.startswith(".") else cookie_domain
+        if not (hostname == norm_domain or hostname.endswith("." + norm_domain)):
             return False
 
     # Path matching (RFC 6265 section 5.1.4)
-    cookie_path = cookie.get("path", "/")
+    cookie_path = cookie.get("path") or "/"
     if cookie_path == "/":
         pass  # root path matches everything
-    elif path != cookie_path and not path.startswith(cookie_path + "/"):
+    elif path == cookie_path:
+        pass
+    elif cookie_path.endswith("/") and path.startswith(cookie_path):
+        pass
+    elif not cookie_path.endswith("/") and path.startswith(cookie_path + "/"):
+        pass
+    else:
         return False
 
     # Secure matching

py/test/unit/selenium/webdriver/common/api_request_context_tests.py

@@ -294,6 +294,22 @@ def test_missing_path_defaults_root():
     assert _cookie_matches({"name": "a", "value": "1", "domain": "example.com"}, "http://example.com/anything")
 
 
+
+
+def test_domain_without_leading_dot_matches_subdomain():
+    assert _cookie_matches({"name": "a", "value": "1", "domain": "example.com"}, "http://sub.example.com/")
+
+
+def test_domain_matching_is_case_insensitive():
+    assert _cookie_matches({"name": "a", "value": "1", "domain": "EXAMPLE.COM"}, "http://example.com/")
+    assert _cookie_matches({"name": "a", "value": "1", "domain": "example.com"}, "http://EXAMPLE.COM/")
+
+
+def test_path_with_trailing_slash_matches_subpath():
+    assert _cookie_matches(
+        {"name": "a", "value": "1", "domain": "example.com", "path": "/docs/"}, "http://example.com/docs/page"
+    )
+
 # --- Secure ---