Stop the trusted-proxy chain walk at unparsable hops

[sascha-egerer]

No description provided.

[Copilot]

Pull request overview

This PR tightens TrustedProxyResolver’s proxy-header trust model by making the right-to-left chain walk stop and fall back to REMOTE_ADDR as soon as it encounters an unparsable hop, and updates unit tests + changelog to reflect the new semantics.

Changes:

• Treat an unparsable hop in the forwarded chain as terminal (stop walking; fall back to the direct peer).
• Update/add unit tests to assert terminal behavior for XFF and Forwarded chains.
• Document the behavioral change as a security fix in the changelog.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
tests/Unit/TrustedProxyTest.php	Updates tests to cover terminal behavior for unparsable hops in XFF/Forwarded chains.
src/Http/TrustedProxyResolver.php	Changes resolver behavior to stop the chain walk at unparsable entries and fall back to REMOTE_ADDR.
CHANGELOG.md	Documents the terminal-unparsable-hop behavior as a security change.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.