Microsoft KB Archive/234016

= ASP May Improperly Parse Cookies Containing a Plus Sign =

Article ID: 234016

Article Last Modified on 10/10/2003

-

APPLIES TO


 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q234016



SYMPTOMS
If a client-side cookie is written from a browser with JavaScript that contains a plus sign (+) in the string, IIS 4.0 returns the space character " " instead of the plus sign (+), as stored in the cookie.



CAUSE
This is by design.



WORKAROUND
It is recommended that any script requiring non-standard characters use URL style encoding (RFC 1738) for cookie handling, including the plus sign (+). The workaround is to use an escaped plus sign or space when you create cookies using client-side scripts.



STATUS
Microsoft has confirmed that this is a problem in Internet Information Server 4.0.

Keywords: kbbug kbpending KB234016

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.