[BUG] - Proxy headers (e.g. X-Forwarded-For) are incorrectly trusted by default