Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cookie value drops = (equal character, 0x3d) #426

Open
janigro opened this issue Oct 16, 2021 · 1 comment
Open

Cookie value drops = (equal character, 0x3d) #426

janigro opened this issue Oct 16, 2021 · 1 comment
Labels

Comments

@janigro
Copy link

janigro commented Oct 16, 2021

Hi!

  • Application version: 16.0.1
  • Operating System (Platform and Version): macOS 11.4

Actual vs Expected Behavior
The server replied with a cookie in its response, and looked like this:

set-cookie: foo=bBRrE9bLezh+bRbQr7jBRd+4jfM7iCrsxe0s1fr4f3I=; Path=/; SameSite=Lax

however, the next request from the Advanced REST Client, dropped the trailing equal character, and the request header looked like this:

cookie: SameSite=Lax; foo=bBRrE9bLezh+bRbQr7jBRd+4jfM7iCrsxe0s1fr4f3I

when it should have looked like this:

cookie: SameSite=Lax; foo=bBRrE9bLezh+bRbQr7jBRd+4jfM7iCrsxe0s1fr4f3I=

Additional Information
Editing the cookie value from the cookie manager window to add an equal character at the end, before doing the request, works fine. But that only works once, because the client will drop the character again after every response.

According to page 8 in RFC6265, the 0x3d (=) character is permitted for the cookie value:

 cookie-value      = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE )
 cookie-octet      = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E
                       ; US-ASCII characters excluding CTLs,
                       ; whitespace DQUOTE, comma, semicolon,
                       ; and backslash

@jarrodek jarrodek added the bug label Nov 30, 2021
@Leon0402
Copy link

Ran into this issue today as well. Searched quite some time to find this issue!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants