I'm still worried in that case. API docs for chrome.cookies.set says, "[cookie.url] value can affect the default domain and path values of the created cookie."