This is a good write up. I identified a similar issue almost a decade ago in a variety of flask apps https://esd.io/blog/flask-apps-heroku-real-ip-spoofing.html

This is a good write up. I identified a similar issue almost a decade ago in a variety of flask apps https://esd.io/blog/flask-apps-heroku-real-ip-spoofing.html https://esd.io/blog/flask-apps-heroku-real-ip-spoofing.html