Problem
Our corporate client just recently added Adobe Analytics through Adobe Marketing Cloud to track their website performance.
The problem is, the required javascript include add several cookie that prints (almost) plain url into the cookie. This triggers several rules in our Web Application Firewall (WAF) that end up making the site unusable. Example Cookie:
Where s_ppv is the cookie name. Notice the double dash in red between the word ads and grabbing. That item triggers our WAF as it commonly used SQL Injection attack.
Suggested Solution
Encode the cookie values into base64 or somekind encoding that only allows alphanumeric character without allowing any special character. It would provide better compatibility on some CDN and WAF.
Note:
Please correct me if i am wrong.
Thank you.
