function headerTestController($serverPort) {
  $args = array('Authorization' => 'foo');
  var_dump(request('localhost', $serverPort, "test_headers.php",
                  [], ['PROXY' => 'foobar'], $args));
}
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.