Even if it is a 'cookie' problem then it means that user sourced data is not going through an appropriate sanitisation before inclusion in a sql query. This is how sql injection attacks happen. From ...

When using string_agg with WITHIN GROUP (ORDER BY ...), Querydsl generates invalid SQL syntax due to a missing space between ORDER BY and the column name. This ...