[CXF-6693] CXF fails to parse Cookie header when it contains $ character

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.1.4
• Fix Version/s: 3.1.5, 3.0.8, 3.2.0
• Component/s: JAX-RS
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Thorsten Hoeger
• Created: 29/Nov/15 14:54
• Updated: 14/Oct/16 14:15
• Resolved: 30/Nov/15 14:22

Description

If the Cookie header contains $ character the method getCookies in org.apache.cxf.jaxrs.impl.HttpHeadersImpl in line 113 fails to parse the individual cookies and returns the complete string as one cookie. Values with ; character will possibly fail to in the current implementation.