Encoding java Cookie value

Question

How should you encode the actual value for a Java Cookie object? I cannot pass characters like '=' or any character outside US-ASCII. /Br joynes

Accepted Answer

It does not really matter how, but usually Base64 should work well.

A cautionary note:

This sounds like you want to store arbitrary settings in a cookie. This is generally not a good idea, because cookies (like all client input) are untrusted. Consider storing the data server-side under some generated (random!) identifier, and putting that into the cookie. That way people cannot circumvent access restrictions or inject arbitrary data into your system through manipulated cookies.

If you cannot use this approach, treat cookie values as untrusted input and verify it as usual.

Edit:

Base64 is not appropriate, as it uses "=", which Java cookies do not support. Rather use

```
java.net.URLEncoder.encode
```

which only uses characters appropriate for cookies.

Encoding java Cookie value

Solution

Problem