Remove the whole %20path=/ section - the HTTP response header should set everything at root level.

If that doesn't work inside a meta http-eqiv, try the HTML encoded version of the path as because the content is in HTML should be correctly decoded (&amp;#47;).

Alternatively you could inject JavaScript to set the cookie via client-side script and set the path via entity encoding (\x2f).

Session Fixation - Setting path to root without /
This question is related to the World of Warcraft Trading Card Game.

I have a Hunter, no allies out, and in my hand is a Frost Trap.



My opponent attacks with Himul Longstrider, who has War Stomp. He wants to target my hero with the War Stomp power.



Will my hero be exhausted before I am able to pay the cost of Frost Trap?  Put another way, does War Stomp exhaust my hero before my hero is "defending," thus preventing me from paying its cost by exhausting my hero?
