mirror of
https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git
synced 2026-06-22 18:20:23 +00:00
✨ **Enhance input validation and error handling across APIs**
- 🛠️ Refactored controllers to utilize `FiltersNumericIds` concern, ensuring secure numeric ID filtering and avoiding type-sensitive errors in queries. - ➕ Added feature tests to validate robust input hardening for non-numeric or malformed query parameters (`user_id`, `selected[]`). - 🔒 Introduced `PublicPropertyNotFoundException` handling in Livewire, returning 400 for invalid property probes and suppressing unnecessary log entries. - ❌ Updated `MeetupEventController` to handle invalid date formats gracefully, aborting with a 400 response instead of 500. - ✅ Expanded exception handling pipeline for enhanced resilience against malformed input, bot noise, and exploitable probes.
This commit is contained in:
@@ -94,3 +94,11 @@ it('filters /api/meetup-events by date when one is supplied', function () {
|
||||
$response->assertSuccessful();
|
||||
expect($response->json())->toBeArray()->not->toBeEmpty();
|
||||
});
|
||||
|
||||
it('returns 400 instead of 500 when the date path segment is not parseable', function () {
|
||||
$this->getJson('/api/meetup-events/'.urlencode('{date}'))
|
||||
->assertStatus(400);
|
||||
|
||||
$this->getJson('/api/meetup-events/not-a-date')
|
||||
->assertStatus(400);
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user