mark_story 48af49ddde Don't trust CLIENT_IP ... The client_ip header can easily be forged. In 'safe' modes we should only trust the remote_addr which comes from the sapi. Remove support for http_clientaddress as I can't seem to find where this ever came from in PHP on the http specs.		2016-03-10 22:04:13 -05:00
..
Email	Include Subject and To in email log when using MailTransport	2016-03-01 22:21:14 +02:00
Http	Fix parsing empty header values.	2016-02-24 22:25:58 -05:00
CakeRequestTest.php	Don't trust CLIENT_IP	2016-03-10 22:04:13 -05:00
CakeResponseTest.php	Various improvements to the CakePHP test files	2015-09-25 17:22:00 +02:00
CakeSocketTest.php	Fixed issue #7579 on the 2.7 branch	2015-12-02 10:24:16 +11:00