diff --git a/addons/web/static/src/legacy/js/core/cookie_utils.js b/addons/web/static/src/legacy/js/core/cookie_utils.js index a8c3a3a8c78..a8049aa3543 100644 --- a/addons/web/static/src/legacy/js/core/cookie_utils.js +++ b/addons/web/static/src/legacy/js/core/cookie_utils.js @@ -16,6 +16,15 @@ const utils = { var cookie = parts.join('='); if (cookieName && cookieName === name) { + if (cookie.startsWith('"')) { + if (cookie.includes('\\')){ + // see werkzeug _cookie_quote + throw new Error( + `Cookie value contains unknown characters ${cookie}` + ) + } + cookie = cookie.slice(1, -1); + } return cookie; } }