Http11Probe

PARSED-SPECIAL

Test ID COOK-PARSED-SPECIAL
Category Cookies
Scored No
RFC Level N/A
Expected 2xx (no crash)

What it sends

Cookies with spaces and = in values — tests framework parser edge cases.

GET /cookie HTTP/1.1\r\n
Host: localhost:8080\r\n
Cookie: a=hello world; b=x=y\r\n
\r\n

Why it matters

Spaces in values and = signs within values are common in real-world cookies (e.g., Base64-encoded tokens) and can confuse parsers that split on = or whitespace too aggressively.

Verdicts

  • Pass — 2xx or 400
  • Warn — 404 (endpoint not available)
  • Fail — 500 (crash)

Sources

Http11Probe — HTTP/1.1 compliance & smuggling testerSource on GitHub