Parsed Special β Cookie Handling
| Test ID | COOK-PARSED-SPECIAL |
| Category | Cookies |
| Scored | No |
| RFC Level | N/A |
| Expected | 2xx (no crash) |
What it sends
Cookies with spaces and = in values β tests framework parser edge cases.
GET /cookie HTTP/1.1\r\n
Host: localhost:8080\r\n
Cookie: a=hello world; b=x=y\r\n
\r\n
Why it matters
Spaces in values and = signs within values are common in real-world cookies (e.g., Base64-encoded tokens) and can confuse parsers that split on = or whitespace too aggressively.
Verdicts
- Pass β 2xx or 400
- Warn β 404 (endpoint not available)
- Fail β 500 (crash)
Sources
- RFC 6265 Β§5.4 β Cookie header
Http11Probe β HTTP/1.1 compliance & smuggling testerSource on GitHub