Dmytro Naumenko

Results 88 comments of Dmytro Naumenko

Comments on columns and tables are implemented in https://github.com/yiisoft/yii2/commit/fde8aa6bcbb902aaea10f02f07fa87e11e5d2d17

http://stackoverflow.com/questions/34207606/yii2-logout-spesific-user/34207850#34207850

Do not have enough expertise in MsSQL to fix it with reasonable time spendings

This is a pretty serious flaw that requires a CVE registration, as it happened in other OpenSource projects: [CVE-2020-28483 for go/gin](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483), [CVE-2020-35590 for WordPress](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35590), [CVE-2020-13485 for CraftCMS](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13485). Making `TRUST_DOWNSTREAM_PROXY` property...

I'd say instead. `TRUSTED_DOWNSTREAM_PROXY_NETWORKS="0.0.0.0/0"` would be an equivalent of `TRUST_DOWNSTREAM_PROXY=1` `TRUSTED_DOWNSTREAM_PROXY_NETWORKS=""` would be an equivalent of `TRUST_DOWNSTREAM_PROXY=0`

Damm, this pull-request is about DOWNSTREAM proxies, not UPSTERAM 😕 Yes, I think this one should be merged as-is. I'll create a separate issue for upstream proxy trust lists.