4.5.76 (May 2025)
Defects
The following are resolved in this build.
The Nexaweb Launcher's CookieParser may not parse cookies correctly and may throw an exception. |
NXPSR-11323: The Nexaweb Launcher's CookieParser may not parse cookies correctly and may throw an exception.
There are some cases where an exception is raised by CookieParser.
For example, CookieParser will raise an exception in the following case:
If "extension-av" contains an equals(“=“) character. e.g.) Set-Cookie : name=value; secure; httponly; originalname=orginalvalue;
If “cookie-pair” is not included. e.g.) Set-Cookie : secure;
For detailed cookie specifications, please see below.
https://datatracker.ietf.org/doc/html/rfc6265#section-4.1.1
https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis
These cases are not errors according to the cookie specifications.