Check Authorization / WWW-Authenticate headers

The HTTP::header page says about

HTTP::header replace  []

 

Replaces the value of the last occurrence of the header named with the string . This command performs a header insertion if the header was not present. If there are multiple instances of the header, only the last instance is replaced.

 

 

Just wondering, wouldn't it be safer to remove all existing instances of

X-Forwarded-For

X-Forwarded-For

 

when HTTP_REQUEST {
    HTTP::header remove X-Forwarded-For
    HTTP::header insert X-Forwarded-For [IP::client_addr]
}

Thank you for a clean solution!