Hi all. When I run project at build in php server (php -S) at $_SERVER variable I don't have key CONTENT_TYPE, but only HTTP_CONTENT_TYPE. As result PUT & DELETE requests doesn't have parameters data, which I send from client side via ajax for example.
Request class have method <https://gist.github.com/3840830> When request object is initialised server variable is created from ServerBag class, that have getHeaders(). This method cuts all HTTP_ prefix from $_SERVER, and result is set to $request->header. My question is: why this checking: > strpos($request->server->get('CONTENT_TYPE'), > 'application/x-www-form-urlencoded') is from server variable instead of headers variable? -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/symfony-devs?hl=en
