fix: only trust X-Forwarded-* headers from trusted_addresses
#11749
semantic.yml
on: pull_request_target
Validate PR title
8s