Add exception for set-cookie headers to always append (#589)

ColdBox · Mar 13, 2024 · 20cdbf5 · 20cdbf5
1 parent 01d8ef1
commit 20cdbf5
Showing 1 changed file with 10 additions and 3 deletions.
diff --git a/system/web/context/RequestContext.cfc b/system/web/context/RequestContext.cfc
@@ -1803,9 +1803,16 @@ component serializable="false" accessors="true" {
 		}
 		// Name Exists and not already set.
 		else if ( !isNull( arguments.name ) ) {
-			getPageContext()
-				.getResponse()
-				.setHeader( javacast( "string", arguments.name ), javacast( "string", arguments.value ) );
+
+			var response = getPageContext().getResponse();
+
+			// special exception for Set-Cookie. We always append this header, instead of overwriting
+ 			if ( arguments.name == "Set-Cookie" ) {
+				response.addHeader( javacast( "string", arguments.name ), javacast( "string", arguments.value ) );
+			} else {
+				response.setHeader( javacast( "string", arguments.name ), javacast( "string", arguments.value ) );
+			}
+
 			variables.responseHeaders[ arguments.name ] = arguments.value;
 		} else {
 			throw(