Currently a "shape test" is performed. This is to prevent blatantly invalid cookies through. However it's more than easy to spoof and even though real validation happens at page level - among other levels - it is preferable to properly test the cookie.
The next consideration however is performance and keeping the proxy lightweight as is intended. The current testing is synchronous and ideally will remain that way or do very lightweight asynchronous work.
Currently a "shape test" is performed. This is to prevent blatantly invalid cookies through. However it's more than easy to spoof and even though real validation happens at page level - among other levels - it is preferable to properly test the cookie.
The next consideration however is performance and keeping the proxy lightweight as is intended. The current testing is synchronous and ideally will remain that way or do very lightweight asynchronous work.