Special characters in cookies

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• AXIOMATICS POLICY SERVER
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

Can SMSESSION and SMIdentity cookie values contain the following characters:

   \ slash   
   ' single quote   
   " double quote  

Solution:

SiteMinder cookie values are encoded with base64 encoding. Characters \, ' and " are not part of base 64 encoding hence will not be in SMSESSION and SMIDENTITY cookie.

For more on base64 endoing and the legal values;
http://en.wikipedia.org/wiki/Base64

Environment

Release:
Component: SMPLC