Laravel Security: Top 7 Mistakes Developers Make

I often see the question: "Is Laravel secure?", and in this video, let's take a look at what the framework offers, and how developers use or misuse the security features.

00:00 Intro
00:37 Blade XSS Attack
02:34 Protect Your .env File
04:34 Don't Use $request-all()
05:53 File Upload: Client Data
06:38 APP_DEBUG=true in Production
08:17 CSRF and Route::get()
09:54 Rate Limiting

Links mentioned in the video:
Blade: Displaying Unescaped Data https://laravel.com/docs/8.x/blade#di...
How to use Laravel .env and .env.example files? https://blog.quickadminpanel.com/how-...
Danger of Using $request-all(), and How to Protect    • Danger of Using $request-all(), and How to...  
Uploaded File Information: https://laravel.com/docs/8.x/filesyst...
Configuration: Debug Mode https://laravel.com/docs/8.x/configur...
Laravel .env.example: APP_XXX Values Explained    • Laravel .env.example: APP_XXX Values Expla...  
CSRF Protection: https://laravel.com/docs/8.x/csrf
Routing: Rate Limiting https://laravel.com/docs/8.x/routing#...

- - - -
Support the channel by checking out our products:
Enroll in my Laravel courses: https://laraveldaily.teachable.com?ut...
Try our Laravel QuickAdminPanel: https://bit.ly/quickadminpanel
Buy my ready-made Laravel scripts: https://laraveldaily.gumroad.com
Purchase my Livewire Kit: https://livewirekit.com
Subscribe to my weekly newsletter: http://bit.ly/laravel-newsletter