Fix cookie panic

1 files changed, 15 insertions, 13 deletions

diff --git a/cookie.go b/cookie.go
index 9e9bd87..e7947c7 100644
--- a/cookie.go
+++ b/cookie.go
@@ -388,19 +388,21 @@ func (c *Cookie) ParseBytes(src []byte) error {
 
 			case 's': // "samesite"
 				if caseInsensitiveCompare(strCookieSameSite, kv.key) {
-					// Case insensitive switch on first char
-					switch kv.value[0] | 0x20 {
-					case 'l': // "lax"
-						if caseInsensitiveCompare(strCookieSameSiteLax, kv.value) {
-							c.sameSite = CookieSameSiteLaxMode
-						}
-					case 's': // "strict"
-						if caseInsensitiveCompare(strCookieSameSiteStrict, kv.value) {
-							c.sameSite = CookieSameSiteStrictMode
-						}
-					case 'n': // "none"
-						if caseInsensitiveCompare(strCookieSameSiteNone, kv.value) {
-							c.sameSite = CookieSameSiteNoneMode
+					if len(kv.value) > 0 {
+						// Case insensitive switch on first char
+						switch kv.value[0] | 0x20 {
+						case 'l': // "lax"
+							if caseInsensitiveCompare(strCookieSameSiteLax, kv.value) {
+								c.sameSite = CookieSameSiteLaxMode
+							}
+						case 's': // "strict"
+							if caseInsensitiveCompare(strCookieSameSiteStrict, kv.value) {
+								c.sameSite = CookieSameSiteStrictMode
+							}
+						case 'n': // "none"
+							if caseInsensitiveCompare(strCookieSameSiteNone, kv.value) {
+								c.sameSite = CookieSameSiteNoneMode
+							}
 						}
 					}
 				}