The fix in 4.1.24 handles the case when an illegal name/value pair is sent from the browser (e.g. via a JavaScript directive in the page). The way it works is by logging the problem, and dropping the cookie.
For server-side cookies (for e.g. bug #18162), you simply need to use version 1 cookies to pass back unusual values. "Jackson, Stephen" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]