What problem does it solve? Laravel applications face common vulnerabilities like SQL injection, XSS, CSRF attacks, mass assignment exploits, and insecure file uploads. This Skill provides concrete, code-level guidance to harden Laravel apps against these threats across authentication, authorization, input handling, and deployment. ## Core Features & Use Cases - Authentication & Authorization: Configure Sanctum/Passport token auth, password hashing rules, policies, gates, and route-level authorization middleware. - Input & Upload Safety: Apply Form Request validation, mass assignment guards, file upload restrictions, and SQL injection prevention via parameter binding. - Production Hardening: Set security headers (CSP, HSTS, X-Frame-Options), configure CORS, rate limiting, signed URLs, encrypted casts, and session/cookie hardening. - Use Case: When building a new API endpoint that accepts file uploads, use this Skill to generate a Form Request with MIME validation, store files on a private disk, enforce authorization via policies, and apply rate limiting. ## Quick Start Review my Laravel controller and routes for security issues and add proper validation, authorization, and rate limiting.
