The documentation is unclear about where to use the method Request::setTrustedHeaderName();.

I assume it must be in the front controller (app.php) but, in any case, I think it should be explicitly stated how to use it properly.