Http11Probe

Parsed Special β€” Cookie Handling

Test ID COOK-PARSED-SPECIAL
Category Cookies
Scored No
RFC Level N/A
Expected 2xx (no crash)

What it sends

Cookies with spaces and = in values β€” tests framework parser edge cases.

GET /cookie HTTP/1.1\r\n
Host: localhost:8080\r\n
Cookie: a=hello world; b=x=y\r\n
\r\n

Why it matters

Spaces in values and = signs within values are common in real-world cookies (e.g., Base64-encoded tokens) and can confuse parsers that split on = or whitespace too aggressively.

Verdicts

  • Pass β€” 2xx or 400
  • Warn β€” 404 (endpoint not available)
  • Fail β€” 500 (crash)

Sources

Http11Probe β€” HTTP/1.1 compliance & smuggling testerSource on GitHub