More horror related to #1

WICG · Aug 16, 2016 · eaee6c7 · eaee6c7
1 parent 4c57137
commit eaee6c7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/cookies.js b/cookies.js
@@ -163,7 +163,9 @@ if (self.document) (function() {
       let httpOnly = !!options.httpOnly;
       if (value == null && maxAge == null && expires == null) maxAge = 0;
       value = value == null ? '' : String(value);
-      if (name === '' && value === '') throw new SyntaxError('Cookies must have a nonempty name or value');
+      if (name === '' && value.indexOf('=') !== '-1') {
+        throw new SyntaxError('Character "=" is not allowed in cookie value with empty name');
+      }
       if (value.match(DISALLOWED_IN_COOKIE_VALUE_RE) || value !== decodeURIComponent(encodeURIComponent(value))) {
         // Does not match document.cookie behavior!
         throw new SyntaxError('Unsupported character in cookie value');