* path-value = * @param {string} path
(path)
| 100 | * @param {string} path |
| 101 | */ |
| 102 | function validateCookiePath (path) { |
| 103 | for (let i = 0; i < path.length; ++i) { |
| 104 | const code = path.charCodeAt(i) |
| 105 | |
| 106 | if ( |
| 107 | code < 0x20 || // exclude CTLs (0-31) |
| 108 | code === 0x7F || // DEL |
| 109 | code === 0x3B // ; |
| 110 | ) { |
| 111 | throw new Error('Invalid cookie path') |
| 112 | } |
| 113 | } |
| 114 | } |
| 115 | |
| 116 | /** |
| 117 | * I have no idea why these values aren't allowed to be honest, |