Accepting File Uploads from your users is always a risky proposal, but have you considered just how easily uploaded files can be used to bypass CSRF and cookie protections?
https://securinglaravel.com/security-tip-bypassing-csrf-protection/#Laravel
↧