Cookie parsing handles invalid URL-encoded cookies (fixes #51)

@@ -45,11 +45,12 @@
 (defn- normalize-quoted-strs
   "Turn quoted strings into normal Clojure strings using read-string."
   [cookies]
-  (for [[name value] cookies]
-    (let [value (codec/url-decode value)]
-      (if (.startsWith ^String value "\"")
-        [name (read-string value)]
-        [name value]))))
+  (remove nil?
+    (for [[name value] cookies]
+      (if-let [value (codec/url-decode value)]
+        (if (.startsWith ^String value "\"")
+          [name (read-string value)]
+          [name value])))))
 
 (defn- get-cookie
   "Get a single cookie from a sequence of cookie-values"

@@ -72,6 +72,11 @@
     (is (= {"Set-Cookie" (list "a=hello+world")}
            (:headers resp)))))
 
+(deftest wrap-cookies-invalid-url-encoded
+  (let [req  {:headers {"cookie" "a=%D"}}
+        resp ((wrap-cookies :cookies) req)]
+    (is (= {} resp))))
+
 (deftest wrap-cookies-keep-set-cookies-intact
   (let [handler (constantly {:headers {"Set-Cookie" (list "a=b")}
                              :cookies {:c "d"}})