Function uri_escape escape / to %2F. Affects setting cookie path. https://github.com/tarantool/http/blob/9047b514ea8ff9604e3844337067a85735650b9d/http/server.lua#L33 Possible fix: res = string.gsub(str, '[^a-zA-Z0-9_/]'