Andras Bacsai 103d5b6c06 fix: sanitize error output in server validation logs ... Escape dynamic error messages with htmlspecialchars() before concatenating into HTML strings stored in validation_logs. Add a Purify-based mutator on Server model as defense-in-depth, with a dedicated HTMLPurifier config that allows only safe structural tags. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-26 18:36:36 +01:00
..
api.php	refactor(core): rename API rate limit ENV	2025-06-18 15:23:44 +02:00
app.php
auth.php
broadcasting.php
cache.php
chunk-upload.php
constants.php	chore: bump version to 4.0.0-beta.471	2026-03-25 13:25:41 +01:00
cors.php
database.php	fix(database): handle PDO constant name change for PGSQL_ATTR_DISABLE_PREPARES	2026-03-03 09:04:45 +01:00
debugbar.php
filesystems.php	Remove webhook maintenance mode replay feature	2025-12-02 13:36:32 +01:00
fortify.php
hashing.php
horizon.php	chore: prepare for PR	2026-02-23 13:24:49 +01:00
livewire.php	Disable legacy_model_binding flag in Livewire config	2025-10-13 15:44:23 +02:00
logging.php	refactor(scheduler): extract cron scheduling logic to shared helper	2026-03-23 10:37:49 +01:00
mail.php
purify.php	fix: sanitize error output in server validation logs	2026-03-26 18:36:36 +01:00
queue.php
ray.php
sanctum.php	update packages	2024-07-10 13:10:21 +02:00
sentry.php
services.php	feat(user): add changelog read tracking and unread count method	2025-08-12 10:06:19 +02:00
session.php	Change default session driver from Redis to database	2025-12-16 12:11:59 +01:00
subscription.php
telescope.php
testing.php
view.php