SecurityWrapperRequest.getHeaderValues - cookie handling

[meg23]

From luke.biddell on August 31, 2011 05:06:13

As per the discussion on the mailing list, SecurityWrapperRequest.getHeaderValues is applying the HTTPHeaderValue validator to the cookie headers and restricting the length to 150 chars.

Chris suggested that this method should ignore cookies along with SecurityWrapperResponse too.

Original issue: http://code.google.com/p/owasp-esapi-java/issues/detail?id=245