class HTTP::Cookie::Scanner

def scan_cookie
  # RFC 6265 4.1.1 & 5.4
  until eos?
    skip_wsp
    # Do not treat comma in a Cookie header value as separator; see CVE-2016-7401
    name, value = scan_name_value(false)
    yield name, value if value
    skip(/;/)
  end
end