ASP May Improperly Parse Cookies Containing a Plus Sign

• Microsoft Internet Information Server version 4.0

SYMPTOMS

If a client-side cookie is written from a browser with JavaScript that contains a plus sign (+) in the string, IIS 4.0 returns the space character " " instead of the plus sign (+), as stored in the cookie.

CAUSE

This is by design.

WORKAROUND

It is recommended that any script requiring non-standard characters use URL style encoding (RFC 1738) for cookie handling, including the plus sign (+). The workaround is to use an escaped plus sign or space when you create cookies using client-side scripts.

STATUS

Microsoft has confirmed this to be a problem in Internet Information Server 4.0.

Additional query words:

Keywords :
Version : winnt:4.0
Platform : winnt
Issue type : kbbug