@kinncj As mentioned by @stof, the `X-Forwarded-For` header may be forged by client, so you should not trust its contents. But if you are sure you need this, you can always get the header contents by yourself. Or you could suggest adding something like `Request::getUntrustedClientIp()`, but you should not introduce security holes in the name of your convenience :)