diff --git a/pkgs/web-server-pkgs/web-server-lib/web-server/http/cookie-parse.rkt b/pkgs/web-server-pkgs/web-server-lib/web-server/http/cookie-parse.rkt
index 5e098fecb8..b3ffdaee06 100644
--- a/pkgs/web-server-pkgs/web-server-lib/web-server/http/cookie-parse.rkt
+++ b/pkgs/web-server-pkgs/web-server-lib/web-server/http/cookie-parse.rkt
@@ -90,7 +90,7 @@
                         [(PATH) 'path]
                         [(TOKEN) $1])
                    (rhs [(TOKEN) $1] ; This is legal, but is subsumed by the illegal rule
-                        [(QUOTED-STRING) $1]
+                        [(QUOTED-STRING) (regexp-replace* (regexp-quote "\\\"") $1 "\"")]
                         ; This is not part of the spec. It is illegal
                         [(illegal) $1])
                    (illegal
diff --git a/pkgs/web-server-pkgs/web-server-test/tests/web-server/http/cookies-test.rkt b/pkgs/web-server-pkgs/web-server-test/tests/web-server/http/cookies-test.rkt
index 6951dc4efd..0026422124 100644
--- a/pkgs/web-server-pkgs/web-server-test/tests/web-server/http/cookies-test.rkt
+++ b/pkgs/web-server-pkgs/web-server-test/tests/web-server/http/cookies-test.rkt
@@ -1,5 +1,7 @@
-#lang racket
+#lang racket/base
 (require rackunit
+         racket/promise
+         racket/list
          net/url
          web-server/http/request-structs
          web-server/http/response-structs
@@ -19,127 +21,108 @@
 (define cookies-tests
   (test-suite
    "Cookies"
-   
+
    (test-suite
     "cookie.rkt"
-    
+
     (test-suite
      "cookie->header and make-cookie"
      (test-check "Simple" header-equal?
                  (cookie->header (make-cookie "name" "value"))
                  (make-header #"Set-Cookie" #"name=value"))
-     
+
      (test-equal? "Comment"
                   (header-value (cookie->header (make-cookie "name" "value" #:comment "comment")))
                   #"name=value; Comment=comment")
-     
+
      (test-equal? "Domain"
                   (header-value (cookie->header (make-cookie "name" "value" #:domain ".domain")))
                   #"name=value; Domain=.domain")
-     
+
      (test-equal? "max-age"
                   (header-value (cookie->header (make-cookie "name" "value" #:max-age 24)))
                   #"name=value; Max-Age=24")
-     
+
      (test-equal? "path"
                   (header-value (cookie->header (make-cookie "name" "value" #:path "path")))
                   #"name=value; Path=path")
-     
+
      (test-equal? "secure? #t"
                   (header-value (cookie->header (make-cookie "name" "value" #:secure? #t)))
                   #"name=value; Secure")
-     
+
      (test-equal? "secure? #f"
                   (header-value (cookie->header (make-cookie "name" "value" #:secure? #f)))
                   #"name=value")))
-   
-   (test-suite
-    "cookie-parse.rkt"
-    
-    (test-equal? "None"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   empty (delay empty) #f
-                   "host" 80 "client"))
-                 empty)
-    
-    (test-equal? "Simple"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   (list (make-header #"Cookie" #"$Version=\"1\"; name=\"value\""))
-                   (delay empty) #f
-                   "host" 80 "client"))
-                 (list (make-client-cookie "$Version" "1" #f #f)
-                       (make-client-cookie "name" "value" #f #f)))
-    
-    (test-equal? "Path"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   (list (make-header #"Cookie" #"$Version=\"1\"; name=\"value\"; $Path=\"/acme\""))
-                   (delay empty) #f
-                   "host" 80 "client"))
-                 (list (make-client-cookie "$Version" "1" #f #f)
-                       (make-client-cookie "name" "value" #f "/acme")))
-    
-    (test-equal? "Domain"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   (list (make-header #"Cookie" #"$Version=\"1\"; name=\"value\"; $Domain=\".acme\""))
-                   (delay empty) #f
-                   "host" 80 "client"))
-                 (list (make-client-cookie "$Version" "1" #f #f)
-                       (make-client-cookie "name" "value" ".acme" #f)))
-    
-    (test-equal? "Multiple"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   (list (make-header #"Cookie" #"$Version=\"1\"; key1=\"value1\"; key2=\"value2\""))
-                   (delay empty) #f
-                   "host" 80 "client"))
-                 (list (make-client-cookie "$Version" "1" #f #f)
-                       (make-client-cookie "key1" "value1" #f #f)
-                       (make-client-cookie "key2" "value2" #f #f)))
-    
-    (test-equal? "Multiple w/ paths & domains"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   (list (make-header #"Cookie" #"$Version=\"1\"; key1=\"value1\"; $Path=\"/acme\"; key2=\"value2\"; $Domain=\".acme\""))
-                   (delay empty) #f
-                   "host" 80 "client"))
-                 (list (make-client-cookie "$Version" "1" #f #f)
-                       (make-client-cookie "key1" "value1" #f "/acme")
-                       (make-client-cookie "key2" "value2" ".acme" #f)))
-    
-     (test-equal? "phpBB. PR10689"
-                 (request-cookies 
-                  (make-request 
-                   #"GET" (string->url "http://test.com/foo")
-                   (list (make-header #"Cookie" 
-                                      #"style_cookie=null; phpbb3_e1p9b_u=54; phpbb3_e1p9b_k=; phpbb3_e1p9b_sid=3fa8d7a7b65fbabcbe9b345861dc079a"))
-                   (delay empty) #f
-                   "host" 80 "client"))
-                 (list (make-client-cookie "style_cookie" "null" #f #f)
-                       (make-client-cookie "phpbb3_e1p9b_u" "54" #f #f)
-                       (make-client-cookie "phpbb3_e1p9b_k" "" #f #f)
-                       (make-client-cookie "phpbb3_e1p9b_sid" "3fa8d7a7b65fbabcbe9b345861dc079a" #f #f)))
-     
-     (test-equal? "Google"
-                  (request-cookies 
-                   (make-request 
-                    #"GET" (string->url "http://test.com/foo")
-                    (list (make-header #"Cookie" 
-                                       #"teaching-order=course;
-__utmz=165257760.1272597702.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)\r\n"))
-                    (delay empty) #f
-                    "host" 80 "client"))
-                  (list (make-client-cookie "teaching-order" "course" #f #f)
-                        (make-client-cookie "__utmz" "165257760.1272597702.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)" #f #f)))
-                  
-    
-    )))
+
+   (let ()
+     (define (reqcs hs)
+       (request-cookies
+        (make-request
+         #"GET" (string->url "http://test.com/foo")
+         hs (delay empty) #f
+         "host" 80 "client")))
+     (define (reqc h)
+       (reqcs (list (make-header #"Cookie" h))))
+
+     (test-suite
+      "cookie-parse.rkt"
+
+
+      (test-equal? "None"
+                   (reqcs empty)
+                   empty)
+
+      (test-equal? "Simple"
+                   (reqc #"$Version=\"1\"; name=\"value\"")
+                   (list (make-client-cookie "$Version" "1" #f #f)
+                         (make-client-cookie "name" "value" #f #f)))
+
+      (test-equal? "Path"
+                   (reqc #"$Version=\"1\"; name=\"value\"; $Path=\"/acme\"")
+                   (list (make-client-cookie "$Version" "1" #f #f)
+                         (make-client-cookie "name" "value" #f "/acme")))
+
+      (test-equal? "Domain"
+                   (reqc #"$Version=\"1\"; name=\"value\"; $Domain=\".acme\"")
+                   (list (make-client-cookie "$Version" "1" #f #f)
+                         (make-client-cookie "name" "value" ".acme" #f)))
+
+      (test-equal? "Multiple"
+                   (reqc #"$Version=\"1\"; key1=\"value1\"; key2=\"value2\"")
+                   (list (make-client-cookie "$Version" "1" #f #f)
+                         (make-client-cookie "key1" "value1" #f #f)
+                         (make-client-cookie "key2" "value2" #f #f)))
+
+      (test-equal? "Multiple w/ paths & domains"
+                   (reqc #"$Version=\"1\"; key1=\"value1\"; $Path=\"/acme\"; key2=\"value2\"; $Domain=\".acme\"")
+                   (list (make-client-cookie "$Version" "1" #f #f)
+                         (make-client-cookie "key1" "value1" #f "/acme")
+                         (make-client-cookie "key2" "value2" ".acme" #f)))
+
+      (test-equal? "phpBB. PR10689"
+                   (reqc #"style_cookie=null; phpbb3_e1p9b_u=54; phpbb3_e1p9b_k=; phpbb3_e1p9b_sid=3fa8d7a7b65fbabcbe9b345861dc079a")
+                   (list (make-client-cookie "style_cookie" "null" #f #f)
+                         (make-client-cookie "phpbb3_e1p9b_u" "54" #f #f)
+                         (make-client-cookie "phpbb3_e1p9b_k" "" #f #f)
+                         (make-client-cookie "phpbb3_e1p9b_sid" "3fa8d7a7b65fbabcbe9b345861dc079a" #f #f)))
+
+      (test-equal? "Google"
+                   (reqc #"teaching-order=course;
+__utmz=165257760.1272597702.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)\r\n")
+                   (list (make-client-cookie "teaching-order" "course" #f #f)
+                         (make-client-cookie "__utmz" "165257760.1272597702.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)" #f #f)))
+
+      (let ()
+        (define in "hell\"w\"o")
+        (define out #"id=\"hell\\\"w\\\"o\"")
+        (test-check "quotes (pr14194)" header-equal?
+                    (cookie->header (make-cookie "id" in))
+                    (make-header #"Set-Cookie" out))
+        (test-equal? "quotes (pr14194)"
+                     (reqc out)
+                     (list (make-client-cookie "id" in #f #f))))))))
+
+(module+ test
+  (require rackunit/text-ui)
+  (run-tests cookies-tests))