EAP 7 (Undertow) does not accept comma (,) as Cookie delimiter

Issue

• EAP 7 (Undertow) does not accept comma (,) as Cookie delimiter.

• When the following request Cookie header is sent from client:

  Cookie: FOO=BAR, JSESSIONID=<jsessionid-value>
  

  EAP 6 handles this Cookie header as two cookies, "FOO=BAR" and "JSESSIONID=<jsessionid-value>". But EAP 7 does not handle comma as Cookie separator, so this Cookie header is treated as one cookie "FOO=BAR, JSESSIONID". (If allow-equals-in-cookie-value="false" is set in listener inside undertow subsystem, EAP 7 treats this as one cookie "FOO=BAR, JSESSIONID=<jsessionid-value>".)

  Web browsers generally do not sent such Cookie header having comma (,) as Cookie delimiter. (Basically semicollon (;) is used by browsers.) However, it's a valid separator in the old Cookie spec RFC2109. And such Cookie header is sent when commons-httpclient 3.x run as a client and Apache httpd is placed as a front-end loadbalancer, as reported in this knowledge article.