Skip to content

Commit 82825ef

Browse files
committed
Lock Livewire properties to prevent bot payload manipulation
- Add #[Locked] to LeadSubmissionForm::$submitted to prevent external assignment - Add #[Locked] to VersionSwitcher::$platform, $versions, $page to prevent tampering
1 parent d75529b commit 82825ef

2 files changed

Lines changed: 6 additions & 0 deletions

File tree

app/Livewire/LeadSubmissionForm.php

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
use App\Rules\Turnstile;
99
use Illuminate\Support\Facades\Notification;
1010
use Illuminate\Support\Facades\RateLimiter;
11+
use Livewire\Attributes\Locked;
1112
use Livewire\Component;
1213

1314
class LeadSubmissionForm extends Component
@@ -24,6 +25,7 @@ class LeadSubmissionForm extends Component
2425

2526
public string $turnstileToken = '';
2627

28+
#[Locked]
2729
public bool $submitted = false;
2830

2931
protected function rules(): array

app/Livewire/VersionSwitcher.php

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,16 +3,20 @@
33
namespace App\Livewire;
44

55
use Illuminate\View\ViewException;
6+
use Livewire\Attributes\Locked;
67
use Livewire\Component;
78

89
class VersionSwitcher extends Component
910
{
11+
#[Locked]
1012
public string $platform;
1113

14+
#[Locked]
1215
public array $versions;
1316

1417
public int $version;
1518

19+
#[Locked]
1620
public string $page;
1721

1822
public function mount(array $versions)

0 commit comments

Comments
 (0)