Empty β Cookie Handling
| Test ID | COOK-EMPTY |
| Category | Cookies |
| Scored | No |
| RFC Level | N/A |
| Expected | 2xx or 400 |
What it sends
Empty Cookie header value β tests parser resilience.
GET /echo HTTP/1.1\r\n
Host: localhost:8080\r\n
Cookie: \r\n
\r\n
Why it matters
Empty Cookie headers can cause null-reference exceptions or crashes in parsers that assume at least one key=value pair.
Verdicts
- Pass β 2xx or 400
- Fail β 500 (crash)
Sources
- RFC 6265 Β§5.4 β Cookie header
Http11Probe β HTTP/1.1 compliance & smuggling testerSource on GitHub