[Argorak]

I'm not sure whether I would call "munging the cookie header with regexps" "cookie handling" ;).

[acdha]

Agreed – it's possible and for simple tasks such as stripping an analytics cookie it's workable but for anything more serious you'd want something like https://github.com/lkarsten/libvmod-cookie