1--TEST--
2ghsa-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix)
3--COOKIE--
4..Host-test=ignore_1;
5._Host-test=ignore_2;
6.[Host-test=ignore_3;
7_.Host-test=ignore_4;
8__Host-test=ignore_5;
9_[Host-test=ignore_6;
10[.Host-test=ignore_7;
11[_Host-test=ignore_8;
12[[Host-test=ignore_9;
13..Host-test[]=ignore_10;
14._Host-test[]=ignore_11;
15.[Host-test[]=ignore_12;
16_.Host-test[]=ignore_13;
17__Host-test[]=legitimate_14;
18_[Host-test[]=legitimate_15;
19[.Host-test[]=ignore_16;
20[_Host-test[]=ignore_17;
21[[Host-test[]=ignore_18;
22..Secure-test=ignore_1;
23._Secure-test=ignore_2;
24.[Secure-test=ignore_3;
25_.Secure-test=ignore_4;
26__Secure-test=ignore_5;
27_[Secure-test=ignore_6;
28[.Secure-test=ignore_7;
29[_Secure-test=ignore_8;
30[[Secure-test=ignore_9;
31..Secure-test[]=ignore_10;
32._Secure-test[]=ignore_11;
33.[Secure-test[]=ignore_12;
34_.Secure-test[]=ignore_13;
35__Secure-test[]=legitimate_14;
36_[Secure-test[]=legitimate_15;
37[.Secure-test[]=ignore_16;
38[_Secure-test[]=ignore_17;
39[[Secure-test[]=ignore_18;
40--FILE--
41<?php
42var_dump($_COOKIE);
43?>
44--EXPECT--
45array(3) {
46  ["__Host-test"]=>
47  array(1) {
48    [0]=>
49    string(13) "legitimate_14"
50  }
51  ["_"]=>
52  array(2) {
53    ["Host-test["]=>
54    string(13) "legitimate_15"
55    ["Secure-test["]=>
56    string(13) "legitimate_15"
57  }
58  ["__Secure-test"]=>
59  array(1) {
60    [0]=>
61    string(13) "legitimate_14"
62  }
63}
64