diff --git a/tests/cookies/header_only_response.sql b/tests/cookies/header_only_response.sql
new file mode 100644
index 00000000..d47c1c63
--- /dev/null
+++ b/tests/cookies/header_only_response.sql
@@ -0,0 +1,2 @@
+select 'status_code' as component, 204 as status;
+select 'cookie' as component, 'session' as name, 'abc123' as value;
diff --git a/tests/cookies/mod.rs b/tests/cookies/mod.rs
index a342534a..bc3ed0cf 100644
--- a/tests/cookies/mod.rs
+++ b/tests/cookies/mod.rs
@@ -1,4 +1,5 @@
 use crate::common::req_path;
+use actix_web::http::StatusCode;
 use actix_web::http::header::SET_COOKIE;
 
 async fn set_cookie_header(path: &str) -> String {
@@ -29,3 +30,12 @@ async fn zero_turns_off_a_cookie_protection() {
     assert!(header.contains("SameSite=Lax"), "{header}");
     assert!(header.contains("Path=/admin"), "{header}");
 }
+
+#[actix_web::test]
+async fn a_page_made_only_of_header_components_still_sends_them() {
+    let resp = req_path("/tests/cookies/header_only_response.sql")
+        .await
+        .unwrap();
+    assert_eq!(resp.status(), StatusCode::NO_CONTENT);
+    assert!(resp.headers().contains_key(SET_COOKIE));
+}