Fluxzero 1.238.0
1.238.0 (2026-08-07)
Features
web: support multi-value request cookies (
4758b3c)Parse every Cookie header value in logical wire order so split HTTP/2 and HTTP/3 cookie crumbs remain visible. Preserve first-match lookups through the default allow policy while offering explicit conflict rejection with redacted failures.
Bug Fixes
web: preserve multi-value cookie consistency (
8e54f4b)Use the shared all-header parser for cookie parameters and isolate builder header lists so copied requests cannot mutate their source.
docs: correct request header case contract (
4e97953)WebRequest has always exposed headers through a case-insensitive map; align the public Javadoc with that observable behavior.
Documentation
web: document request cookie conflict handling (
63bfa91)Explain HTTP/2 and HTTP/3 cookie-field splitting, case and ordering rules, backward-compatible first-match lookup, and fail-closed guidance for security-sensitive cookies.
Tests
web: cover existing request cookie contracts (
08bebcd)Lock down first-match selection, case behavior, header-map replacement, serialization, and the public mutable builder cookie list before extending multi-value parsing.