Reply to thread

Well, it's not necessarily a bug in CI, more of a strange design decision (IMO). However, the RFCs do allow % in cookie names (which may be decoded to the raw character by the time CI sees it). That said, it's probably still ok to remove special chars.