Add :escape_key option to set_cookie_header

This can be set to false to avoid escaping the key.

This is a very explicit approach to allowing some cookie names to
not be escaped.

Fixes #1796

1 files changed, 8 insertions, 0 deletions

diff --git a/test/spec_utils.rb b/test/spec_utils.rb
index d95d03c9..b368d204 100644
--- a/test/spec_utils.rb
+++ b/test/spec_utils.rb
@@ -599,6 +599,14 @@ describe Rack::Utils, "cookies" do
     headers['set-cookie'].must_equal ['name=value', 'name2=value2', 'name2=value3']
   end
 
+  it "encodes cookie key values by default" do
+    Rack::Utils.set_cookie_header('na e', 'value').must_equal 'na+e=value'
+  end
+
+  it "does not encode cookie key values if :escape_key is false" do
+    Rack::Utils.set_cookie_header('na e', value: 'value', escape_key: false).must_equal 'na e=value'
+  end
+
   it "deletes cookies in header field" do
     header = []