|[jetty-users] Jetty doesn't seem to like Cookies separated by commas - intentional?|
> Hi Folks, > > I've been looking into a problem were seeing on our site, which is built on Jetty - it seems that some browsers are sending cookies with a ',' separator (instead of the usual ';') - our cookie getting code in jetty seems to have trouble parsing these cookies. According to the spec http://www.ietf.org/rfc/rfc2109.txt, a ',' is undesirable but acceptable: > > "Note: For backward compatibility, the separator in the Cookie header is semi-colon (;) everywhere. A server should also accept comma (,) as the separator between cookie-values for future compatibility." > I took a peek in the code for jetty-server, and I can see on line 201 of ./src/main/java/org/eclipse/jetty/server/CookieCutter.java we're commenting out ',' in one of the case statements used in the parsing of cookies. Is this intentional? Git annotate shows that change was made on 2012-03-29 16:58:56 by Greg Wilkins, as a change, it's very much out on it's on own, so it looks like it's intentional (but I'm not sure!) > > Curious, and would appreciate any guidance. > Ade.
Back to the top