Quotes in cookie values are stripped
- Dominant language
- Java
- Stars
- 9.5k
- Forks
- 2.3k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 5
Description
**HB** ([Bug 62015](https://bz.apache.org/bugzilla//show_bug.cgi?id=62015&redirect=false)):
When a server sends a cookie containing JSON, this is a problem, e.g. the server may send this header:
Set-Cookie: x={"Language":"en","Value":10}; expires=Mon, 16-Jul-2018 22:00:00 GMT; path=/
Then on the next request it will send the cookie as:
...; x="{Language:de,Value:10}"; ...
This of course fails to parse on the server.
(When i tried to work around this problem by setting the cookie manually via script or cookie manager config element, the quotes ended up on the server in escaped form (i.e. with backslash characters before the inner quotes.))
Severity: normal
OS: All
Contributor guide
Assessment
This issue has not been assessed yet.