security: add HTTP security headers, rate limiting on sensitive routes, and file upload extension validation

2026-11-01 16:46:03 +01:00
parent 2d44647f94
commit ef19221b62
7 changed files with 50 additions and 9 deletions
@@ -94,7 +94,7 @@ class CartController extends Controller
        $validated = $request->validate([
            'model_name' => 'nullable|string|max:255',
            'model_url' => 'nullable|url|max:1000',
-            'model_file' => 'nullable|file|max:51200', // 50MB
+            'model_file' => 'nullable|file|extensions:stl,3mf,obj,step,stp,zip|max:51200', // 50MB
            'size' => 'required|in:klein,medium,groot',
            'material' => 'required|string',
            'color' => 'required|string',