mark_story 48af49ddde Don't trust CLIENT_IP ... The client_ip header can easily be forged. In 'safe' modes we should only trust the remote_addr which comes from the sapi. Remove support for http_clientaddress as I can't seem to find where this ever came from in PHP on the http specs.		2016-03-10 22:04:13 -05:00
..
Email	Include Subject and To in email log when using MailTransport	2016-03-01 22:21:14 +02:00
Http	Fix parsing empty header values.	2016-02-24 22:25:58 -05:00
CakeRequest.php	Don't trust CLIENT_IP	2016-03-10 22:04:13 -05:00
CakeResponse.php	Merge pull request #7447 from ravage84/2.7-lib-improvements	2015-09-25 12:14:00 -04:00
CakeSocket.php	Merge pull request #7836 from RichieB2B/fix-proxy-auth-via-ssl	2015-12-15 21:56:40 -05:00