The X-Forwarded-Prefix was not configured to be used. Added it in $headers.

I also introduced a variable TRUSTED_PROXIES that should be an array of proxies that user can configure to be trusted. If the variable is not configured, the default is '*' which means any proxy will be trusted.

The use of this variable has to be validated because it should be an array, but we want users to only specify a comma-separated list of IPs, like this:

    protected $proxies = [
        '192.168.1.1',
        '192.168.1.2',
    ];

Maybe some logic/formatting is needed to achieve that. (tbr by @alexjustesen)

References:

• Route caching returns wrong route if route name is equal to the application prefix laravel/framework#42539 (comment)
• [9.x] Support x-forwarded-prefix in TrustProxies.php laravel/framework#40014
• https://github.com/symfony/http-foundation/blob/6.2/Request.php