Parsed Empty Val — Cookie Handling

What it sends

Cookie with empty value parsed without crash.

GET /cookie HTTP/1.1\r\n
Host: localhost:8080\r\n
Cookie: foo=\r\n
\r\n

Why it matters

Cookies with empty values (foo=) are valid per RFC 6265 but can crash parsers that assume a non-empty value after the = sign.

Verdicts

• Pass — 2xx or 400
• Warn — 404 (endpoint not available)
• Fail — 500 (crash)

Sources

• RFC 6265 §5.4 — Cookie header