Minor Description
The proposed patch adds methods to CookieUtils to escape and un-escape a string for invalid cookie characters.
These methods should perhaps systematically be called when using the other CookieUtils methods. However, this could potentially break cookies existing prior to that change. On the other hand, CookieUtils has only just been added in wicket 1.5 so maybe this isn't a problem.