Jon Osborn (Migrated from SEC-1871) said:
For some implementations behind proxy services, the CookiePath must be 'url encoded' to transform the path into a public path that the browser will recognize. There should be a property on the RememberMeServices to enable response.urlEncode() for the cookie path.
patch attached. includes beandefinitionparser
Comment From: rwinch
The path is properly encoded/decoded by the servlet container, so we should not do any additional encoding/decoding.