mirror of
https://github.com/Kong/insomnia.git
synced 2026-11-05 04:23:55 -05:00
Kyle
16eac656de
No import format (Postman, HAR, curl, or Insomnia's own v5 CookieSchema) carries the `source` field, so an imported cookie always gets grandfathered to 'manual' by the CookieJar init-model migration, and its value renders as a template like any other manual cookie. This is intentional, not a bug: importing a collection already means trusting it with sandboxed script execution, so a templated cookie value isn't a new capability beyond what a malicious pre-request script in the same file could already do. Pinning it down here so it isn't accidentally "fixed" (which would break template rendering for legitimately imported cookies, e.g. shared team collections) without a deliberate decision.