@@ -195,6 +195,32 @@ public void fromResponseHeader() {
195
195
assertFalse (cookie .secure );
196
196
assertEquals (cookie .value , "bar" );
197
197
198
+ // Missing closing quote
199
+ // - This is not a valid value, but we are handling it anyway.
200
+ cookie = Cookie .fromResponseHeader ("foo=\" bar; SameSite=" );
201
+ assertNull (cookie .domain );
202
+ assertNull (cookie .expires );
203
+ assertFalse (cookie .httpOnly );
204
+ assertNull (cookie .maxAge );
205
+ assertEquals (cookie .name , "foo" );
206
+ assertNull (cookie .path );
207
+ assertNull (cookie .sameSite );
208
+ assertFalse (cookie .secure );
209
+ assertEquals (cookie .value , "bar" );
210
+
211
+ // Missing opening quote
212
+ // - This is not a valid value, but we are handling it anyway.
213
+ cookie = Cookie .fromResponseHeader ("foo=bar\" ; SameSite=" );
214
+ assertNull (cookie .domain );
215
+ assertNull (cookie .expires );
216
+ assertFalse (cookie .httpOnly );
217
+ assertNull (cookie .maxAge );
218
+ assertEquals (cookie .name , "foo" );
219
+ assertNull (cookie .path );
220
+ assertNull (cookie .sameSite );
221
+ assertFalse (cookie .secure );
222
+ assertEquals (cookie .value , "bar" );
223
+
198
224
// Broken attributes
199
225
cookie = Cookie .fromResponseHeader ("foo=bar; =fusionauth.io; =Wed, 21 Oct 2015 07:28:00 GMT; =1; =Lax" );
200
226
assertNull (cookie .domain );
0 commit comments