php-laravel-audit

Auditing a Laravel project for mass assignment and CSRF vulnerabilities involves static analysis of Eloquent fillable attributes and CSRF token middleware. This process maps framework security mechanisms to identify misconfigurations and produce evidence-based risk findings.

Laravel Blade rendering and session configurations carry risks like unescaped raw output and insecure cookie flags. Analyzing these patterns reveals potential XSS exposures and session fixation points for structured risk reporting.

Yes, you can check Laravel authentication middleware and Policies for consistency. Static analysis evaluates middleware/auth, Gates, and Policies to verify that permission models align correctly and identify implementation flaws.

Static analysis detects Laravel signed URL and route validation weaknesses by parsing PHP source to verify signature checks. It maps the closure of route protection to expose unsigned or tampered URL acceptance points.

Yes, the security audit covers API routes that bypass the CSRF except list. It evaluates token protection coverage, identifies except list entries, and assesses API authentication differences to map exposure boundaries.