I believe you are spreading bad information here. In your test you sent a get request with the html entity in the request. When a browser sends the request I believe it decodes the link before it sends the get request. I tried it out with firefox and the web developer plugin and the cookie still gets set with the ;amp in the source.
Now for scripts with header redirects, you would want to be careful, but no need to change ;amp to & in your regular html.
|