Special characters in the cookie causing 400 bad requests from Spring Security

[xiechangning20]

Describe the bug
Special characters in the cookie causing 400 bad requests from Spring Security Http Fire wall

To Reproduce
Steps to reproduce the behavior locally:

1. Go to home page, for instance:
   http://localhost:8080/catalogue/srv/eng/catalog.search
2. Go to the application tab in the browser and add a cookie with special characters, such as ẞ , 我, ’, 😀
3. Refresh the page
4. Will see 400 the described bad request error in UI

Expected behavior
Support special characters in the cookie

Screenshots

Log file
Error Message from Spring
Message Cannot build ServiceRequest Cause : The request was rejected because the header value "XSRF-TOKEN=4e62422e-0856-4b71-9dd6-ac8c8c5ce378; JSESSIONID=419CAE53ADA85118DC471FA40C563195; serverTime=1721755840263; sessionExpiry=1721755840263; test=�" is not allowed. Error : org.springframework.security.web.firewall.RequestRejectedException

Desktop (please complete the following information):

• Browser
  Edge
• GeoNetwork Version
  4.2.9
• Server Application
  Tomcat 9.0.87 with Java 8

Additional context
Likely caused by Spring mis-interpreted the cookie value as ISO-8859-1 (Latin1) instead of UTF-8. Which can be fixed by configuring the following:

https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html