None base64 chars allowed in cookie

chars.js

// http://tools.ietf.org/html/rfc6265#section-4.1.1
var allowedChars = [0x21, [0x23, 0x2B], [0x2D, 0x3A], [0x3C, 0x5B], [0x5D, 0x7E]]
var chars = []
allowedChars.forEach(function (range) {
  if (!range.length) {
    chars.push(String.fromCharCode(range))
    return
  }
  for (var code = range[0]; code < range[1]; code++) {
    chars.push(String.fromCharCode(code))
  }
})
var allowed = chars.filter(function (c) {
  return !/[A-Za-z\/+0-9]/.test(c)
}).join('')
console.log(allowed)
// !#$%&'()*-.<=>?@]^_`{|}

Result is !#$%&'()*-.<=>?@]^_{|}`

Notice that = is valid but could possible break bad cookie parsers.