This previously checked whether the first octet was non-zero, treating most IPv4 addresses (e.g. 183.189.143.11) as potentially trustworthy. Match the first octet against 0x7f so only 127.0.0.0/8 is trusted.
