httpoxy

Yii 2.0 General Discussions
1

Reading some news about Httpoxy vulnerability. Apart from server side, is there anything yii users should be taking care?

2

Samdark confirmed that Yii HTTP Client is not affected by this. Tweet

If you are using other clients make sure these have been fixed or switch to the client mentioned above.

3

thanks.

4

In general one should be careful when relying on $_SERVER data. Yii itself isn’t affected but application code could be.

5

Thanks. The only $_SERVER data I use is ‘REMOTE_ADDR’, validated by ip validator before saving.