[jetty-users] Jetty doesn't seem to like Cookies separated by commas - i

[Ade <adrian.trenaman@xxxxxxxxxxxxxx>]

> Hi Folks, 
> 
> I've been looking into a problem were seeing on our site, which is built on Jetty - it seems that some browsers are sending cookies with a ',' separator (instead of the usual ';') - our cookie getting code in jetty seems to have trouble parsing these cookies. According to the spec http://www.ietf.org/rfc/rfc2109.txt, a ',' is undesirable but acceptable: 
> 
> "Note: For backward compatibility, the separator in the Cookie header is semi-colon (;) everywhere. A server should also accept comma (,) as the separator between cookie-values for future compatibility." 
> I took a peek in the code for jetty-server, and I can see on line 201 of ./src/main/java/org/eclipse/jetty/server/CookieCutter.java we're commenting out ',' in one of the case statements used in the parsing of cookies. Is this intentional? Git annotate shows that change was made on 2012-03-29 16:58:56 by Greg Wilkins, as a change, it's very much out on it's on own, so it looks like it's intentional (but I'm not sure!)
> 
> Curious, and would appreciate any guidance.
> Ade.