Minor Changes

• Added a trustProxy option to createRequestListener() and createRequest() so apps behind trusted reverse proxies can construct request.url from Forwarded, X-Forwarded-Host, and X-Forwarded-Proto headers. createRequestListener() also uses trusted Forwarded and X-Forwarded-For values for handler client address information (see #10874).

Patch Changes

• Reject request body reads when clients abort uploads, and avoid writing fallback error responses after streaming response headers are already committed (see #11533 and #11534).