3 ms·
If your question is regarding the precedence of the Proxy header vs. an environment variable, I'm not sure which of the two would win, but even if it's the latt
by pfg 10y ago
If your question is regarding the precedence of the Proxy header vs. an environment variable, I'm not sure which of the two would win, but even if it's the latter, anyone who doesn't set it (which is probably the majority) would still be vulnerable.
- mwpmaybe 10y agoCGI implementations will take the value of the Proxy header and clobber whatever might have originally been set in the environment at HTTP_PROXY.