Does <cfcookie> ignore the encodevalue="yes" parameter?

Can anyone confirm that “cfcookie” ignores the [encodevalue=“yes”] parameter and does not encode the cookie value?

<cfcookie name="cookie_test" value="376B3346-463E-4F79-83FFE7C41451304A" expires="7" encodevalue="yes">

When you inspect the cookie in the browser console, the encoded value should be “376B3346%2D463E%2D4F79%2D83FFE7C41451304A”, but in my case the value is the not encoded value: 376B3346-463E-4F79-83FFE7C41451304A

Don’t forget to tell us about your stack!

OS: Debian 9.13 - Linux
Java Version: openJDK-11.0.11
Tomcat Version: 9.0.48
Lucee Version: Lucee 5.3.8.201

Yes, I can confirm cfcookie ignores the encodevalue=true parameter and doesn’t encode the cookie value. https://github.com/lucee/Lucee/blob/5.3/core/src/main/java/lucee/runtime/type/scope/CookieImpl.java#L261-#L277. @Knut Can you file a bug in Jira https://luceeserver.atlassian.net/jira

Thank you for your confirmation.

I filed the bug under: https://luceeserver.atlassian.net/browse/LDEV-3721

1 Like