No wait, I was totally wrong 
The cookie value is legit. It can be wrapped in double quotes.
HTTP::Cookies::Parser correctly recognizes the quoted value, but it doesn’t dequote when creating the HTTP::Cookie instance.
1 Like