Javadoc
Returns the list of forwarded IP addresses. This is useful when the user
agent is separated from the origin server by a chain of intermediary
components. Creates a new instance if no one has been set.
The first address is the one of the immediate client component and the
last address should correspond to the origin client (frequently a user
agent).
This information is only safe for intermediary components within your
local network. Other addresses could easily be changed by setting a fake
header and should not be trusted for serious security checks.
Note that your HTTP server connectors need to have a special
"useForwardedForHeader" parameter explicitly set to "true" in order to
activate this feature, due to potential security issues.