code: private static BitSet validCookieValueOctets() {
          BitSet bits = new BitSet(8);
          for (int i = 35; i < 127; i++) {
              // US-ASCII characters excluding CTLs (%x00-1F / %x7F)
              bits.set(i);
          }
          bits.set('"', false);  // exclude DQUOTE = %x22
          bits.set(',', false);  // exclude comma = %x2C
          bits.set(';', false);  // exclude semicolon = %x3B
          bits.set('\\', false); // exclude backslash = %x5C
          return bits;
      }
docs: US-ASCII characters excluding CTLs, whitespace, DQUOTE, comma, semicolon, and backslash