Search code examples
asp.nethtmlcookieshttpcookie

Is it safe to use Request.ApplicationPath for cookie path

Is it safe to use such code?

Response.Cookies[cookieName].Path = Request.ApplicationPath + "/";

I want to know about all corner cases, please...

Solution

  • In short, no, it's not safe. Using cookie paths is fraught with problems as they are case sensitive in IE and Chrome, but not FF. This means any mismatch in path case will stuff things up.

    1. When generating a cookie, if the path you set differs in case from what the user typed, browsers won't store it.

    2. When the user returns, if the path they enter differs in case from the first trip, the browser won't supply the cookie with the request.

    What problem are you trying to solve?