security: add HTTP security headers, rate limiting on sensitive routes, and file upload extension validation

2026-11-01 16:46:03 +01:00
parent 2d44647f94
commit ef19221b62
7 changed files with 50 additions and 9 deletions
@@ -106,7 +106,7 @@ class ShopController extends Controller
            'preferred_material' => 'nullable|string|max:50',
            'preferred_color' => 'nullable|string|max:50',
            'dimensions' => 'nullable|string|max:100',
-            'model_file' => 'nullable|file|max:51200', // max 50MB (stl, step, obj, zip)
+            'model_file' => 'nullable|file|extensions:stl,3mf,obj,step,stp,zip|max:51200', // max 50MB (stl, step, obj, zip)
        ]);

        $filePath = null;