merged branch igorw/prevent-proxy-appdev (PR #318)
merged branch igorw/prevent-proxy-appdev (PR #318)

Commits
-------

de70062 Prevent access to app_dev.php through proxy

Discussion
----------

[2.0] Prevent access to app_dev.php through proxy

Proxies are sometimes on the same machine as the webserver, so they will gain access to app_dev.php, as they have a localhost IP.

That makes app_dev.php accessible by default in such setups.

This commit disallows access to app_dev.php if proxy headers are present.

fahadonline/sulu,black-project/black-standard,JMSBot/CSBill,GulDmitry/music-diff,locastic/psc-symfony-angularjs,Baachi/symfony-standard,havvg/symfony-standard-propel,jbdelhommeau/symfony-standard,dunglas/symfony-standard,JMSBot/CSBill,uttam-vi/pardawala,NoUseFreak/StandardEdition,dantleech/symfony-doctrine-phpcr-edition,phiamo/symfony-bootstrap,damedia/culture.ru,HumanBooster/Symfony,WouterJ/symfony-standard,lyrixx/symfony-rest-edition,symfony/symfony-standard,we-bridge/symfony-admin,oustaban/eurotax,den2134/itdTest,tdd-php/angaze,wachterjohannes/sulu-standard,debruyne0/symfony,trsteel88/symfony-standard,webignition/worker.simplytestable.com,theodo/theodo-kata,webignition/worker.simplytestable.com,shcloudservices/agiletourreg,hrisproject/hris,simonjcarr/symfony_rest,benja-M-1/rogercms-sandbox,shcloudservices/agiletourreg,wachterjohannes/sulu-standard,singingstars/flydb,symfony/symfony-standard,lukaszgi/operowo,webignition/app.simplytestable.com,OskarStark/symfony-standard,yelmontaser/symfony-standard,buddhikajay/symfony-sonata-distribution,havvg/symfony-propel-edition,tdd-php/literatura,MatthieuCutin/ligue-squash,cordoval/symfony-gae,WolfMicrosystems/symfony-wms,phiamo/symfony-bootstrap,rainbowcode/spanvoice-standard,VolCh/test-rethis.ru,cordoval/symfony-gae,achrafYne/restaurants-guide,yohang/non-obstrusive-form-sf2,mnapoli/symfony-standard,JMSBot/CSBill,ovelasquez/ussi,xiaobudongzhang/symfony-standard,micha149/wedding-page,cordoval/symfony-bootstrap,vincentchalamon/phpunit-bridge,checat/symfony-minimal,symfony2-od-podstaw/26-01-sf21,makasim/LiipImagineBundleSandbox,tarasinio/weather-remainder.com,peterkokot/symfony-standard,0mars/symfony-standard-issue-13291,yelmontaser/symfony-standard,damedia/culture.ru,dziamid/lunch-time-composer,Cartesia/01,uttam-vi/pardawala,fahadonline/sulu,WolfMicrosystems/symfony-wms,platformsh/platformsh-example-symfony,yohang/non-obstrusive-form-sf2,phospr/symfony-starter,fcerezo/famaluz,merk/comment-server,papaavola/symfony-standard,cordoval/symfony-bootstrap,MatthieuCutin/ligue-squash,propelorm/symfony-propel-edition,uttam-vi/pardawala,isidromerayo/symfony2-jobeet,zanderbaldwin/symfony-layers,havvg/symfony-propel-edition,sandello-alkr/symfony,ewgRa/symfony-standard,chebetos/SymfonyTest,joferzs/firewall,jmather/pagoda-symfony-sonata-distribution,GulDmitry/music-diff,bamarni/symfony-docker,bshaffer/symfony-standard,Clastic/StandardEdition,webignition/worker.simplytestable.com,Soullivaneuh/symfony-standard,tdd-php/angaze,mkrauser/symfony-dump-demo,twisted-socket/stage-plots,micha149/wedding-page,amalv/cupon,rajkamalganeshvivid/symfony-standard,bocharsky-bw/symfony-standard,continuousphp/symfony-skeleton,orodsem/trout,flyboarder/AirOS,jmather/pagoda-symfony-sonata-distribution,mattvaadi/hris,oustaban/eurotax,pjcdawkins/tmp-symfony-demo,webignition/simplytestable.com,fduch/symfony-standard-workflow,tdd-php/football,umpirsky/symfony-standard,ericclemmons/ericclemmons.github.io,fduch/symfony-standard-workflow,Clastic/StandardEdition,taylankasap/symfony-standard,shadowtje1990/symfony_todo_api,tristanbes/symfony-standard,buddhikajay/symfony-sonata-distribution,merk/comment-server,Thiktak/Jordo,damedia/culture.ru,kmelia/fresh-symfony,InkApplications/barenaked-symfony,freecastle/Symfony2_Boilerplate,formapro-forks/api-basic,mweimerskirch/symfony-standard,continuousphp/symfony-skeleton,pocit/ExpoApiBundle,fahadonline/sulu,aerrasti/iemedebe,ovelasquez/ussi,dkarvounaris/symfony-standard,symfony2-od-podstaw/knp-menu-example,cordoval/demo-symfony2-argentina,ctrl-f5/symfony-standard,Tobion/symfony-standard,Musak/firstsymfony2project,UxorialRook/symfony-standard,propelorm/symfony-propel-edition,symfony-cmf/standard-edition,vincentaubert/symfony-standard,debruyne0/symfony,jakzal/symfony-standard,GulDmitry/music-diff,webignition/worker.simplytestable.com,myroshnychenko/SymfonyCMF,JMSBot/CSBill,JMSBot/CSBill,orodsem/trout,simonjcarr/symfony_rest,AlexeyKupershtokh/symfony-standard,ucay/Skeleton,Clastic/StandardEdition,Baachi/symfony-standard,lyrixx/symfony-standard,NoUseFreak/StandardEdition,apnet/symfony-standard-edition,the-software-factory/superhero-api,micha149/wedding-page,ucay/Skeleton,tdd-php/literatura,OskarStark/symfony-standard,marcoleong/musictube,mattvaadi/hris,ericclemmons/ericclemmons.github.io,webignition/worker.simplytestable.com,basdek/SymfonyFireWall,NoUseFreak/StandardEdition,fcerezo/famaluz,damedia/culture.ru,phiamo/symfony-bootstrap,kmelia/fresh-symfony,tiagobrito/ds1.sfdaypt14,tiagobrito/ds1.sfdaypt14,flevour/symfony-issue-3889,dkarvounaris/symfony-standard,taylankasap/symfony-standard,tarasinio/weather-remainder.com,tederkkila/snapshot_server,gencer/symfony-standard,damedia/culture.ru,buddhika-jay/symfony-sonata-distribution,shamcode/symfony-testing,1ed/symfony-standard,chregu/symfony-standard,2085020/first-symfony-project,lanthaler/sfHydraDemoApp,mukulu/hris,underq/symfony-rest-edition-experiment,b00giZm/symfony-boilerplate-app,markitosgv/DevOps,ovelasquez/ussi,meonkeys/symfony2-dual-auth,Thiktak/Jordo,tPl0ch/symfony-phpqatools,IgorTimoshenko/symfony-standard-requirejs,black-project/black-standard,Metabor/Start-App,aprezcuba24/symfony-standard,theodo/theodo-kata,spolischook/standard-edition,mukulu/hris,continuousphp/symfony-skeleton,tdd-php/football,javiereguiluz/symfony-standard,IgorTimoshenko/symfony-standard-requirejs,SymfonyId/Skeleton,phospr/symfony-starter,gnugat-legacy/symfony-empty,rommsen/plesynd,ucsf-ckm/symfony-emberjs-edition,Thiktak/Jordo,papaavola/symfony-standard,chebetos/SymfonyTest,chrisciampoli/cleats,gencer/symfony-standard,amalv/cupon,baukaman/NeedYou,chebetos/SymfonyTest,meonkeys/symfony2-dual-auth,the-software-factory/superhero-api,npotier/sf2Showcase,bshaffer/symfony-standard,cordoval/symfony-bootstrap,alihalabyah/symfony-rest-edition,alihalabyah/symfony-rest-edition,Chill-project/Standard,umpirsky/symfony-standard,proteichik/testApp,ybutb/videotask,merk/Citadel,ybutb/videotask,phiamo/symfony-bootstrap,irro/MastoAlliance,ucay/Skeleton,yhoiseth/notelite.net,twisted-socket/stage-plots,tederkkila/snapshot_server,apnet/symfony-standard-edition,zanderbaldwin/symfony-layers,UxorialRook/symfony-standard,webignition/simplytestable.com,hrisproject/hris,xabbuh/symfony-standard,foopro/symfony-screenfony,mikekamornikov/remmart.ru,foopro/symfony-screenfony,wachterjohannes/sulu-standard,beyondkeysystem/psc-symfony-angularjs,beyondkeysystem/psc-symfony-angularjs,delorenj/elleol_legacy,b00giZm/symfony-boilerplate-app,gimler/symfony-rest-edition,adrienbrault/symfony-silex-edition,damienalexandre/symfony-standard,mukulu/hris,Knouki/Jobeet-Symfony,tarasinio/weather-remainder.com,egeloen/symfony-standard,jmather/symfony-sonata-distribution,sulu-io/sulu-standard,kosintwong/symfony_test,Tobion/symfony-standard,HasClass0/standard-edition,phiamo/symfony-bootstrap,oustaban/eurotax,skafandri/blog,liip-forks/symfony-standard,mykehsd/jobeet,baukaman/NeedYou,hrisproject/hris,gnugat/symfony-empty,spolischook/standard-edition,lukaszgi/operowo,trsteel88/symfony-standard,shamcode/symfony-testing,glavweb/symfony-standard,basdek/SymfonyFireWall,gimler/symfony-rest-edition,cordoval/spike-edition,RuntyCybin/symfony-standard,platformsh/platformsh-example-symfony,glavweb/symfony-standard,symfony-cmf/standard-edition,bionic-university/alexander-pobereznichenko,VolCh/test-rethis.ru,joferzs/firewall,unewochialat/symfony-standard,mayeco/symfony-standard-pagodabox,bocharsky-bw/symfony-standard,bamarni/symfony-docker,chebetos/SymfonyTest,skafandri/blog,orodsem/trout,dziamid/lunch-time-composer,fabpot/symfony-standard,HasClass0/standard-edition,tristanbes/symfony-standard,kucherevskyA/kucherevskiy-test-task,freecastle/Symfony2_Boilerplate,GulDmitry/music-diff,fcerezo/famaluz,jakzal/symfony-standard,kmelia/fresh-symfony,Musak/firstsymfony2project,lyrixx/symfony-standard,Cartesia/01,liip-forks/symfony-standard,phiamo/symfony-bootstrap,isidromerayo/symfony2-jobeet,Spea/symfony-standard,egeloen/symfony-standard,rajkamalganeshvivid/symfony-standard,ctrl-f5/symfony-standard,unewochialat/symfony-standard,irro/MastoAlliance,flyboarder/AirOS,tomat/symfony-standard,b00giZm/symfony-boilerplate-app,merk/Citadel,SymfonyId/Skeleton,by-examples/symfony-standard,webignition/simplytestable.com,javiereguiluz/symfony-standard,tarasinio/weather-remainder.com,mukulu/hris,vincentchalamon/phpunit-bridge,dunglas/symfony-standard,apnet/symfony-standard-edition,stof/symfony-standard,mweimerskirch/symfony-standard,martinmike2/website-study,Spea/symfony-standard,mattvaadi/hris,AlexeyKupershtokh/symfony-standard,SymfonyId/api-platform,mattvaadi/hris,tdd-php/angaze,vincentaubert/symfony-standard,shcloudservices/agiletourreg,fahadonline/sulu,Koc/symfony-standard,outlandishideas/symfony-standard,aerrasti/iemedebe,shadowtje1990/symfony_todo_api,sulu-io/sulu-standard,yohang/non-obstrusive-form-sf2,Rvanlaak/symfony-standard,VolCh/test-rethis.ru,mqmtech/show-app,dziamid/lunch-time-composer,lmaslowski/sf2,formapro-forks/api-basic,ucsf-ckm/symfony-emberjs-edition,WouterJ/symfony-standard,Cartesia/01,drufony/drufony,lukaszgi/operowo,buddhika-jay/symfony-sonata-distribution,continuousphp/symfony-skeleton,flevour/symfony-issue-3889,Chill-project/Standard,jbdelhommeau/symfony-standard,sulu-io/sulu-standard,pjcdawkins/tmp-symfony-demo,rommsen/plesynd,oustaban/eurotax,den2134/itdTest,joferzs/firewall,Ocramius/symfony-standard,tdd-php/angaze,fabpot/symfony-standard,reidel/hobby-1,hrisproject/hris,cordoval/symfony-gae,mqmtech/show-app,RuntyCybin/symfony-standard,marcoleong/musictube,lsmith77/symfony-standard,delorenj/elleol_legacy,stof/symfony-standard,Soullivaneuh/symfony-standard,webignition/app.simplytestable.com,FLM/uberstrap,mykehsd/jobeet,csarrazi/AppKernelGenerator,proteichik/testApp,ewgRa/symfony-standard,webmozart/symfony-standard,hrisproject/hris,cordoval/symfony-bootstrap,elcodi/symfonycon-demo,havvg/symfony-standard-propel,mhlavac/symfony-skeleton,xiaobudongzhang/symfony-standard,yhoiseth/notelite.net