From e804574c2e0b828a20e419a834f2e29243574926 Mon Sep 17 00:00:00 2001
From: Chaim Sanders <csanders@sparsa.org>
Date: Mon, 25 Apr 2016 16:41:47 -0400
Subject: [PATCH] Updated Reference Manual (mediawiki)

---
 Reference-Manual.mediawiki | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Reference-Manual.mediawiki b/Reference-Manual.mediawiki
index 01a176d..dff0f2f 100644
--- a/Reference-Manual.mediawiki
+++ b/Reference-Manual.mediawiki
@@ -2310,6 +2310,8 @@ This variable is a collection of the names of all of the request headers.
 
 <code>SecRule REQUEST_HEADERS_NAMES "^x-forwarded-for" "log,deny,id:48,status:403,t:lowercase,msg:'Proxy Server Used'"</code>
 
+; Note: ModSecurity will treat multiple headers that have identical names in accordance with how the webserver treats them. For Apache this means that they will all be concatenated into a single header with a comma as the deliminator. 
+
 == REQUEST_LINE ==
 This variable holds the complete request line sent to the server (including the request method and HTTP version information).