Andras Bacsai 8a164735cb fix(api): extract resource UUIDs from route parameters ...

Extract resource UUIDs from route parameters instead of request body
in ApplicationsController and ServicesController environment variable
endpoints. This prevents UUID parameters from being spoofed in the
request body.

- Replace $request->uuid with $request->route('uuid')
- Replace $request->env_uuid with $request->route('env_uuid')
- Add tests verifying route parameters are used and body UUIDs ignored

2026-03-19 21:56:58 +01:00

..

Controllers

fix(api): extract resource UUIDs from route parameters

2026-03-19 21:56:58 +01:00

Middleware

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

Kernel.php

feat: implement TrustHosts middleware to handle FQDN and IP address trust logic

2025-10-15 15:28:21 +02:00