Description:
------------
Recent changes in cookie handling breaks backward compatibility.

The netscape cookie specification says about commas in Set-Cookie header:

If there is a need to place such data in the name or value, some encoding method such as URL style %XX encoding is recommended, though no encoding is defined or required.

Read RECOMMENDED, BUT NOT REQUIRED.

Additionally this limitation only covers name=value in Set-Cookie and not Cookie name=opaque_strings.

PHP's Set-Cookie does not allow sending plain commas as Cookie, but that does not change the fact, that anyone can set a Cookie via Java Script with a plain comma in it or use another script language that runs on the same server and is part of the application. Browsers happily send them in plain back.

Lots of sites, especially those with FALK.ag ad banners have plain commas in there cookies. It is not longer possible for PHP script on those servers to handle these cookies.