server.php

<?php
namespace Bitrix\Security\Filter;
 
use Bitrix\Main\Type\IRequestFilter;
 
class Server
    extends Request
    implements IRequestFilter
{
 
    protected $interestingKeys = array('REQUEST_URI', 'QUERY_STRING', 'SCRIPT_URL', 'SCRIPT_URI', 'PHP_SELF');
 
    public function filter(array $values, $isReturnChangedOnly = true)
    {
        $this->onFilterStarted();
 
        foreach ($values as $key => &$val)
        {
            if (
                substr($key, 0, 5) === 'HTTP_'
                || in_array($key, $this->interestingKeys, true)
            )
            {
                $val = $this->filterVar('server', $val, '$_SERVER["'.$key.'"]');
            }
 
        }
        unset($val);
 
        $this->onFilterFinished();
 
        if (!$isReturnChangedOnly || isset($this->changedContext['server']))
            return $values;
        else
            return null;
    }
}