Source: yaws Severity: normal Tags: security http://seclists.org/oss-sec/2016/q3/95 claims that yaws sets HTTP_PROXY based a passed Proxy: header. I don't see any evidence for that in the source, but maybe I'm missing something? heers, Moritz