Changelog Digest for Sat, Dec 3

[kareila]

[dw-free]

060cc29: Issue #1899: merge get and post args for Net::OpenID::Server Merge get and post args to avoid using deprecated module methods.

ce30773: Issue #1902: add optional IS_TRUSTED_PROXY config to improve TRUST_X_HEADERS Be more discerning when checking contents of X-Forwarded-For request headers.

998743f: Issue #1903: ignore client IP when checking for trusted proxies Only examine X-Forwarded-For IPs, not the client IP which is unreliable.

c3091b7: Issue #1903: ignore client IP when checking for trusted proxies More succinct expression for setting the @req_hosts variable.