X-Forwarded-For is appended without a trusted-proxy check

[Sachinxmpl]

internal/proxy/l7/server.go

A client can inject a spoofed X-Forwarded-For

Fix -> a trusted_proxies setting that strips/replaces X-Forwarded-For from untrusted sources.