TheHEADER_X_FORWARDED_ALL implicitly trust thex-forwarded-host header, leading to possible host header attack (as warned in thedocumentation.)

Moreover, thisHEADER_X_FORWARDED_ALL does not really fowardsall headers, as ti does not supportsX-Forwarded-Prefix headers.

This PR deprecate the constant and the new framework bundle configuration. It will be removed in 6.0. People have to use: either:

• Request::setTrustedProxies(['1.2.3.4'], Request::HEADER_X_FORWARDED_FOR | Request::HEADER_X_FORWARDED_HOST | Request::HEADER_X_FORWARDED_PORT | Request::HEADER_X_FORWARDED_PROTO);
• Request::setTrustedProxies(['1.2.3.4'], Request::HEADER_X_FORWARDED_TRAEFIK);
• framework.trusted_headers: [x-forwarded-for, x-forwarded-host, x-forwarded-port, x-forwarded-proto]