Invalid Characters(CR/LF) in header Set-Cookie in 6.3 version

[Former Member]

Hi All,

While login to cs cockpit, productcockpit and cmscockpit in hybris 6.3 by selecting remember-me option ,facing the following error.

java.lang.IllegalArgumentException: Invalid characters (CR/LF) in header Set-Cookie org.springframework.security.web.firewall.FirewalledResponse.validateCrlf(FirewalledResponse.java:73) org.springframework.security.web.firewall.FirewalledResponse.addCookie(FirewalledResponse.java:63) javax.servlet.http.HttpServletResponseWrapper.addCookie(HttpServletResponseWrapper.java:57) de.hybris.platform.jalo.user.UserManager.storeLoginTokenCookie(UserManager.java:1579) de.hybris.platform.spring.security.CoreRememberMeService.onLoginSuccess(CoreRememberMeService.java:87) de.hybris.platform.spring.security.CoreRememberMeService.loginSuccess(CoreRememberMeService.java:320) org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.successfulAuthentication(AbstractAuthenticationProcessingFilter.java:318) org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:240)

in 6.2 we did not face this error, but after migrating to 6.3 we are facing this problem,

Please help.thanks