Fortify security audit reports a header manipulation vulnerability in Request.php because HTTP_USER_AGENT is not validated.