# X_COOKIE_INVALID

## Means

a Set-Cookie value would be dropped, misread or injectable

## Typical cause

serializeSetCookie() was given a name, value or attribute a browser rejects or that could split the header

## Fix

`serializeSetCookie(name, value, options)` — correct the field named in meta.field, as the cause says

[Core and runtime](/error-codes#core-and-runtime)