From cb8b973300ddb7d516141b37c580b1d5a423a0e4 Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Fri, 28 Aug 2026 17:50:19 +0200 Subject: [PATCH 1/3] Unify appsec Laravel framework to tracer --- .../appsec/php/docker/AppSecContainer.groovy | 6 +- .../php/integration/Laravel8xTests.groovy | 7 +- .../src/test/www/laravel8x/.editorconfig | 18 -- .../src/test/www/laravel8x/.env.example | 8 - .../src/test/www/laravel8x/.gitattributes | 10 - .../src/test/www/laravel8x/.gitignore | 15 -- .../src/test/www/laravel8x/.styleci.yml | 14 -- .../src/test/www/laravel8x/README.md | 64 ----- .../test/www/laravel8x/app/Console/Kernel.php | 32 --- .../www/laravel8x/app/Exceptions/Handler.php | 41 --- .../app/Http/Controllers/Controller.php | 13 - .../app/Http/Controllers/LoginController.php | 57 ----- .../test/www/laravel8x/app/Http/Kernel.php | 67 ----- .../app/Http/Middleware/Authenticate.php | 21 -- .../app/Http/Middleware/EncryptCookies.php | 17 -- .../PreventRequestsDuringMaintenance.php | 17 -- .../Middleware/RedirectIfAuthenticated.php | 32 --- .../app/Http/Middleware/TrimStrings.php | 19 -- .../app/Http/Middleware/TrustHosts.php | 20 -- .../app/Http/Middleware/TrustProxies.php | 28 --- .../app/Http/Middleware/VerifyCsrfToken.php | 17 -- .../test/www/laravel8x/app/Models/User.php | 44 ---- .../app/Providers/AppServiceProvider.php | 28 --- .../app/Providers/AuthServiceProvider.php | 30 --- .../Providers/BroadcastServiceProvider.php | 21 -- .../app/Providers/EventServiceProvider.php | 32 --- .../app/Providers/RouteServiceProvider.php | 63 ----- .../src/test/www/laravel8x/artisan | 53 ---- .../src/test/www/laravel8x/bootstrap/app.php | 55 ---- .../www/laravel8x/bootstrap/cache/.gitignore | 2 - .../src/test/www/laravel8x/composer.json | 65 ----- .../src/test/www/laravel8x/config/app.php | 235 ------------------ .../src/test/www/laravel8x/config/auth.php | 111 --------- .../www/laravel8x/config/broadcasting.php | 64 ----- .../src/test/www/laravel8x/config/cache.php | 110 -------- .../src/test/www/laravel8x/config/cors.php | 34 --- .../test/www/laravel8x/config/database.php | 147 ----------- .../test/www/laravel8x/config/filesystems.php | 73 ------ .../src/test/www/laravel8x/config/hashing.php | 52 ---- .../src/test/www/laravel8x/config/logging.php | 118 --------- .../src/test/www/laravel8x/config/mail.php | 118 --------- .../src/test/www/laravel8x/config/queue.php | 93 ------- .../src/test/www/laravel8x/config/sanctum.php | 65 ----- .../test/www/laravel8x/config/services.php | 33 --- .../src/test/www/laravel8x/config/session.php | 201 --------------- .../src/test/www/laravel8x/config/view.php | 36 --- .../test/www/laravel8x/database/.gitignore | 1 - .../database/factories/UserFactory.php | 39 --- .../2014_10_12_000000_create_users_table.php | 36 --- ...12_100000_create_password_resets_table.php | 32 --- ..._08_19_000000_create_failed_jobs_table.php | 36 --- ...01_create_personal_access_tokens_table.php | 36 --- .../database/seeders/DatabaseSeeder.php | 24 -- .../src/test/www/laravel8x/initialize.sh | 19 -- .../src/test/www/laravel8x/phpunit.xml | 31 --- .../src/test/www/laravel8x/public/.htaccess | 21 -- .../src/test/www/laravel8x/public/favicon.ico | 0 .../src/test/www/laravel8x/public/index.php | 55 ---- .../laravel8x/public/outside_of_framework.php | 3 - .../src/test/www/laravel8x/public/robots.txt | 2 - .../test/www/laravel8x/resources/css/app.css | 0 .../test/www/laravel8x/resources/js/app.js | 1 - .../www/laravel8x/resources/js/bootstrap.js | 28 --- .../www/laravel8x/resources/lang/en/auth.php | 20 -- .../resources/lang/en/pagination.php | 19 -- .../laravel8x/resources/lang/en/passwords.php | 22 -- .../resources/lang/en/validation.php | 163 ------------ .../resources/views/welcome.blade.php | 132 ---------- .../src/test/www/laravel8x/routes/api.php | 19 -- .../test/www/laravel8x/routes/channels.php | 18 -- .../src/test/www/laravel8x/routes/console.php | 19 -- .../src/test/www/laravel8x/routes/web.php | 23 -- .../src/test/www/laravel8x/server.php | 21 -- .../test/www/laravel8x/storage/app/.gitignore | 3 - .../laravel8x/storage/app/public/.gitignore | 2 - .../laravel8x/storage/framework/.gitignore | 9 - .../storage/framework/cache/.gitignore | 3 - .../storage/framework/cache/data/.gitignore | 2 - .../storage/framework/sessions/.gitignore | 2 - .../storage/framework/testing/.gitignore | 2 - .../storage/framework/views/.gitignore | 2 - .../www/laravel8x/storage/logs/.gitignore | 2 - .../laravel8x/tests/CreatesApplication.php | 22 -- .../laravel8x/tests/Feature/ExampleTest.php | 21 -- .../src/test/www/laravel8x/tests/TestCase.php | 10 - .../www/laravel8x/tests/Unit/ExampleTest.php | 18 -- .../src/test/www/laravel8x/webpack.mix.js | 17 -- .../Http/Controllers/LoginTestController.php | 37 +++ .../app/Http/Controllers/MiscController.php | 2 +- .../database/seeders/DatabaseSeeder.php | 13 +- .../Laravel/Version_8_x/initialize.sh | 34 +++ .../public/outside_of_framework.php | 4 + .../Laravel/Version_8_x/routes/web.php | 8 + 93 files changed, 98 insertions(+), 3341 deletions(-) delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/.editorconfig delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/.env.example delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/.gitattributes delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/.styleci.yml delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/README.md delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Console/Kernel.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Exceptions/Handler.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/Controller.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/LoginController.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Kernel.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/Authenticate.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/EncryptCookies.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/PreventRequestsDuringMaintenance.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/RedirectIfAuthenticated.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrimStrings.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustHosts.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustProxies.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/VerifyCsrfToken.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Models/User.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Providers/AppServiceProvider.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Providers/AuthServiceProvider.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Providers/BroadcastServiceProvider.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Providers/EventServiceProvider.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/app/Providers/RouteServiceProvider.php delete mode 100755 appsec/tests/integration/src/test/www/laravel8x/artisan delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/bootstrap/app.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/bootstrap/cache/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/composer.json delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/app.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/auth.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/broadcasting.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/cache.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/cors.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/database.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/filesystems.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/hashing.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/logging.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/mail.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/queue.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/sanctum.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/services.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/session.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/config/view.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/factories/UserFactory.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_000000_create_users_table.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_100000_create_password_resets_table.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_08_19_000000_create_failed_jobs_table.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_12_14_000001_create_personal_access_tokens_table.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/database/seeders/DatabaseSeeder.php delete mode 100755 appsec/tests/integration/src/test/www/laravel8x/initialize.sh delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/phpunit.xml delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/public/.htaccess delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/public/favicon.ico delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/public/index.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/public/outside_of_framework.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/public/robots.txt delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/css/app.css delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/js/app.js delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/js/bootstrap.js delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/auth.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/pagination.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/passwords.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/validation.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/resources/views/welcome.blade.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/routes/api.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/routes/channels.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/routes/console.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/routes/web.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/server.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/app/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/app/public/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/framework/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/data/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/framework/sessions/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/framework/testing/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/framework/views/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/storage/logs/.gitignore delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/tests/CreatesApplication.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/tests/Feature/ExampleTest.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/tests/TestCase.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/tests/Unit/ExampleTest.php delete mode 100644 appsec/tests/integration/src/test/www/laravel8x/webpack.mix.js rename {appsec/tests/integration/src/test/www/laravel8x => tests/Frameworks/Laravel/Version_8_x}/app/Http/Controllers/MiscController.php (73%) create mode 100755 tests/Frameworks/Laravel/Version_8_x/initialize.sh create mode 100644 tests/Frameworks/Laravel/Version_8_x/public/outside_of_framework.php diff --git a/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy b/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy index f42a2704678..d0907e3afc5 100644 --- a/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy +++ b/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy @@ -516,9 +516,11 @@ class AppSecContainer> extends GenericContain cmd.hostConfig.withUlimits([new Ulimit('core', -1L, -1L)] as Ulimit[]) } - this.wwwDir ="src/test/www/${options.get('www', 'base')}" + String wwwValue = options.get('www', 'base') as String + this.wwwDir = wwwValue.contains('/') ? wwwValue : "src/test/www/${wwwValue}" if (options['www_src']) { - this.wwwSrcDir = "src/test/www/${options['www_src']}" + String wwwSrcValue = options['www_src'] as String + this.wwwSrcDir = wwwSrcValue.contains('/') ? wwwSrcValue : "src/test/www/${wwwSrcValue}" } withFileSystemBind('../../..', '/project', BindMode.READ_ONLY) diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy index 08d0642e4e0..6d959d40f69 100644 --- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy +++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy @@ -25,7 +25,7 @@ import static java.net.http.HttpResponse.BodyHandlers.ofString @EnabledIf('isExpectedVersion') @TestMethodOrder(MethodOrderer.OrderAnnotation) class Laravel8xTests { - static boolean expectedVersion = phpVersion.contains('7.4') && !variant.contains('zts') + static boolean expectedVersion = phpVersion.contains('8.1') && !variant.contains('zts') AppSecContainer getContainer() { getClass().CONTAINER @@ -39,7 +39,7 @@ class Laravel8xTests { baseTag: 'apache2-mod-php', phpVersion: phpVersion, phpVariant: variant, - www: 'laravel8x', + www: '../../../tests/Frameworks/Laravel/Version_8_x', ) static void main(String[] args) { @@ -209,12 +209,11 @@ class Laravel8xTests { endpoints.size() > 0 }) - assert endpoints.size() == 6 + assert endpoints.size() == 29 assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null assert endpoints.find { it.path == 'authenticate' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET authenticate' } != null assert endpoints.find { it.path == 'register' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET register' } != null assert endpoints.find { it.path == 'dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET dynamic-path/{param01}' } != null - assert endpoints.find { it.path == 'sanctum/csrf-cookie' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET sanctum/csrf-cookie' } != null assert endpoints.find { it.path == 'api/user' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET api/user' } != null } } diff --git a/appsec/tests/integration/src/test/www/laravel8x/.editorconfig b/appsec/tests/integration/src/test/www/laravel8x/.editorconfig deleted file mode 100644 index 1671c9b9d94..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/.editorconfig +++ /dev/null @@ -1,18 +0,0 @@ -root = true - -[*] -charset = utf-8 -end_of_line = lf -insert_final_newline = true -indent_style = space -indent_size = 4 -trim_trailing_whitespace = true - -[*.md] -trim_trailing_whitespace = false - -[*.{yml,yaml}] -indent_size = 2 - -[docker-compose.yml] -indent_size = 4 diff --git a/appsec/tests/integration/src/test/www/laravel8x/.env.example b/appsec/tests/integration/src/test/www/laravel8x/.env.example deleted file mode 100644 index d06ab0478ad..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/.env.example +++ /dev/null @@ -1,8 +0,0 @@ -APP_NAME=Laravel -APP_ENV=local -APP_KEY= -APP_DEBUG=true -APP_URL=http://localhost - -DB_CONNECTION=sqlite -DB_DATABASE=/tmp/database.sqlite diff --git a/appsec/tests/integration/src/test/www/laravel8x/.gitattributes b/appsec/tests/integration/src/test/www/laravel8x/.gitattributes deleted file mode 100644 index 510d9961f10..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/.gitattributes +++ /dev/null @@ -1,10 +0,0 @@ -* text=auto - -*.blade.php diff=html -*.css diff=css -*.html diff=html -*.md diff=markdown -*.php diff=php - -/.github export-ignore -CHANGELOG.md export-ignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/.gitignore deleted file mode 100644 index eb003b01a1d..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/.gitignore +++ /dev/null @@ -1,15 +0,0 @@ -/node_modules -/public/hot -/public/storage -/storage/*.key -/vendor -.env -.env.backup -.phpunit.result.cache -docker-compose.override.yml -Homestead.json -Homestead.yaml -npm-debug.log -yarn-error.log -/.idea -/.vscode diff --git a/appsec/tests/integration/src/test/www/laravel8x/.styleci.yml b/appsec/tests/integration/src/test/www/laravel8x/.styleci.yml deleted file mode 100644 index 877ea701dbf..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/.styleci.yml +++ /dev/null @@ -1,14 +0,0 @@ -php: - preset: laravel - version: 8 - disabled: - - no_unused_imports - finder: - not-name: - - index.php - - server.php -js: - finder: - not-name: - - webpack.mix.js -css: true diff --git a/appsec/tests/integration/src/test/www/laravel8x/README.md b/appsec/tests/integration/src/test/www/laravel8x/README.md deleted file mode 100644 index 1b6397ce32f..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/README.md +++ /dev/null @@ -1,64 +0,0 @@ -

- -

-Build Status -Total Downloads -Latest Stable Version -License -

- -## About Laravel - -Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as: - -- [Simple, fast routing engine](https://laravel.com/docs/routing). -- [Powerful dependency injection container](https://laravel.com/docs/container). -- Multiple back-ends for [session](https://laravel.com/docs/session) and [cache](https://laravel.com/docs/cache) storage. -- Expressive, intuitive [database ORM](https://laravel.com/docs/eloquent). -- Database agnostic [schema migrations](https://laravel.com/docs/migrations). -- [Robust background job processing](https://laravel.com/docs/queues). -- [Real-time event broadcasting](https://laravel.com/docs/broadcasting). - -Laravel is accessible, powerful, and provides tools required for large, robust applications. - -## Learning Laravel - -Laravel has the most extensive and thorough [documentation](https://laravel.com/docs) and video tutorial library of all modern web application frameworks, making it a breeze to get started with the framework. - -If you don't feel like reading, [Laracasts](https://laracasts.com) can help. Laracasts contains over 1500 video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library. - -## Laravel Sponsors - -We would like to extend our thanks to the following sponsors for funding Laravel development. If you are interested in becoming a sponsor, please visit the Laravel [Patreon page](https://patreon.com/taylorotwell). - -### Premium Partners - -- **[Vehikl](https://vehikl.com/)** -- **[Tighten Co.](https://tighten.co)** -- **[Kirschbaum Development Group](https://kirschbaumdevelopment.com)** -- **[64 Robots](https://64robots.com)** -- **[Cubet Techno Labs](https://cubettech.com)** -- **[Cyber-Duck](https://cyber-duck.co.uk)** -- **[Many](https://www.many.co.uk)** -- **[Webdock, Fast VPS Hosting](https://www.webdock.io/en)** -- **[DevSquad](https://devsquad.com)** -- **[Curotec](https://www.curotec.com/services/technologies/laravel/)** -- **[OP.GG](https://op.gg)** -- **[WebReinvent](https://webreinvent.com/?utm_source=laravel&utm_medium=github&utm_campaign=patreon-sponsors)** -- **[Lendio](https://lendio.com)** - -## Contributing - -Thank you for considering contributing to the Laravel framework! The contribution guide can be found in the [Laravel documentation](https://laravel.com/docs/contributions). - -## Code of Conduct - -In order to ensure that the Laravel community is welcoming to all, please review and abide by the [Code of Conduct](https://laravel.com/docs/contributions#code-of-conduct). - -## Security Vulnerabilities - -If you discover a security vulnerability within Laravel, please send an e-mail to Taylor Otwell via [taylor@laravel.com](mailto:taylor@laravel.com). All security vulnerabilities will be promptly addressed. - -## License - -The Laravel framework is open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT). diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Console/Kernel.php b/appsec/tests/integration/src/test/www/laravel8x/app/Console/Kernel.php deleted file mode 100644 index d8bc1d29f0c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Console/Kernel.php +++ /dev/null @@ -1,32 +0,0 @@ -command('inspire')->hourly(); - } - - /** - * Register the commands for the application. - * - * @return void - */ - protected function commands() - { - $this->load(__DIR__.'/Commands'); - - require base_path('routes/console.php'); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Exceptions/Handler.php b/appsec/tests/integration/src/test/www/laravel8x/app/Exceptions/Handler.php deleted file mode 100644 index 8e7fbd1be9c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Exceptions/Handler.php +++ /dev/null @@ -1,41 +0,0 @@ -> - */ - protected $dontReport = [ - // - ]; - - /** - * A list of the inputs that are never flashed for validation exceptions. - * - * @var array - */ - protected $dontFlash = [ - 'current_password', - 'password', - 'password_confirmation', - ]; - - /** - * Register the exception handling callbacks for the application. - * - * @return void - */ - public function register() - { - $this->reportable(function (Throwable $e) { - // - }); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/Controller.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/Controller.php deleted file mode 100644 index a0a2a8a34a6..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/Controller.php +++ /dev/null @@ -1,13 +0,0 @@ - $request->get('email'), - 'password' => $request->query('password', 'password'), - ]; - - if (Auth::attempt($credentials)) { - $request->session()->regenerate(); - - return response('Login successful', 200); - } - - return response('Invalid credentials', 403); - } - - public function register(Request $request): Response - { - $request->validate([ - 'name' => ['required'], - 'email' => ['required'], - 'password' => ['required'], - ]); - - $user = User::create([ - 'name' => $request->name, - 'email' => $request->email, - 'password' => Hash::make($request->password), - ]); - - event(new Registered($user)); - - Auth::login($user); - - return response('User created', 200); - } -} \ No newline at end of file diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Kernel.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Kernel.php deleted file mode 100644 index c18d13212cc..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Kernel.php +++ /dev/null @@ -1,67 +0,0 @@ - - */ - protected $middleware = [ - // \App\Http\Middleware\TrustHosts::class, - \App\Http\Middleware\TrustProxies::class, - \Fruitcake\Cors\HandleCors::class, - \App\Http\Middleware\PreventRequestsDuringMaintenance::class, - \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class, - \App\Http\Middleware\TrimStrings::class, - \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class, - ]; - - /** - * The application's route middleware groups. - * - * @var array> - */ - protected $middlewareGroups = [ - 'web' => [ - \App\Http\Middleware\EncryptCookies::class, - \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class, - \Illuminate\Session\Middleware\StartSession::class, - // \Illuminate\Session\Middleware\AuthenticateSession::class, - \Illuminate\View\Middleware\ShareErrorsFromSession::class, - //\App\Http\Middleware\VerifyCsrfToken::class, - \Illuminate\Routing\Middleware\SubstituteBindings::class, - ], - - 'api' => [ - // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class, - 'throttle:api', - \Illuminate\Routing\Middleware\SubstituteBindings::class, - ], - ]; - - /** - * The application's route middleware. - * - * These middleware may be assigned to groups or used individually. - * - * @var array - */ - protected $routeMiddleware = [ - 'auth' => \App\Http\Middleware\Authenticate::class, - 'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class, - 'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class, - 'can' => \Illuminate\Auth\Middleware\Authorize::class, - 'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class, - 'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class, - 'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class, - 'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class, - 'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class, - ]; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/Authenticate.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/Authenticate.php deleted file mode 100644 index 704089a7fe7..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/Authenticate.php +++ /dev/null @@ -1,21 +0,0 @@ -expectsJson()) { - return route('login'); - } - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/EncryptCookies.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/EncryptCookies.php deleted file mode 100644 index 867695bdcff..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/EncryptCookies.php +++ /dev/null @@ -1,17 +0,0 @@ - - */ - protected $except = [ - // - ]; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/PreventRequestsDuringMaintenance.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/PreventRequestsDuringMaintenance.php deleted file mode 100644 index 74cbd9a9eaa..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/PreventRequestsDuringMaintenance.php +++ /dev/null @@ -1,17 +0,0 @@ - - */ - protected $except = [ - // - ]; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/RedirectIfAuthenticated.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/RedirectIfAuthenticated.php deleted file mode 100644 index a2813a06489..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/RedirectIfAuthenticated.php +++ /dev/null @@ -1,32 +0,0 @@ -check()) { - return redirect(RouteServiceProvider::HOME); - } - } - - return $next($request); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrimStrings.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrimStrings.php deleted file mode 100644 index 88cadcaaf28..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrimStrings.php +++ /dev/null @@ -1,19 +0,0 @@ - - */ - protected $except = [ - 'current_password', - 'password', - 'password_confirmation', - ]; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustHosts.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustHosts.php deleted file mode 100644 index 7186414c657..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustHosts.php +++ /dev/null @@ -1,20 +0,0 @@ - - */ - public function hosts() - { - return [ - $this->allSubdomainsOfApplicationUrl(), - ]; - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustProxies.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustProxies.php deleted file mode 100644 index 3391630ecc9..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/TrustProxies.php +++ /dev/null @@ -1,28 +0,0 @@ -|string|null - */ - protected $proxies; - - /** - * The headers that should be used to detect proxies. - * - * @var int - */ - protected $headers = - Request::HEADER_X_FORWARDED_FOR | - Request::HEADER_X_FORWARDED_HOST | - Request::HEADER_X_FORWARDED_PORT | - Request::HEADER_X_FORWARDED_PROTO | - Request::HEADER_X_FORWARDED_AWS_ELB; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/VerifyCsrfToken.php b/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/VerifyCsrfToken.php deleted file mode 100644 index 9e86521722b..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Middleware/VerifyCsrfToken.php +++ /dev/null @@ -1,17 +0,0 @@ - - */ - protected $except = [ - // - ]; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Models/User.php b/appsec/tests/integration/src/test/www/laravel8x/app/Models/User.php deleted file mode 100644 index 89963686eb2..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Models/User.php +++ /dev/null @@ -1,44 +0,0 @@ - - */ - protected $fillable = [ - 'name', - 'email', - 'password', - ]; - - /** - * The attributes that should be hidden for serialization. - * - * @var array - */ - protected $hidden = [ - 'password', - 'remember_token', - ]; - - /** - * The attributes that should be cast. - * - * @var array - */ - protected $casts = [ - 'email_verified_at' => 'datetime', - ]; -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Providers/AppServiceProvider.php b/appsec/tests/integration/src/test/www/laravel8x/app/Providers/AppServiceProvider.php deleted file mode 100644 index ee8ca5bcd8f..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Providers/AppServiceProvider.php +++ /dev/null @@ -1,28 +0,0 @@ - - */ - protected $policies = [ - // 'App\Models\Model' => 'App\Policies\ModelPolicy', - ]; - - /** - * Register any authentication / authorization services. - * - * @return void - */ - public function boot() - { - $this->registerPolicies(); - - // - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Providers/BroadcastServiceProvider.php b/appsec/tests/integration/src/test/www/laravel8x/app/Providers/BroadcastServiceProvider.php deleted file mode 100644 index 395c518bc47..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Providers/BroadcastServiceProvider.php +++ /dev/null @@ -1,21 +0,0 @@ -> - */ - protected $listen = [ - Registered::class => [ - SendEmailVerificationNotification::class, - ], - ]; - - /** - * Register any events for your application. - * - * @return void - */ - public function boot() - { - // - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Providers/RouteServiceProvider.php b/appsec/tests/integration/src/test/www/laravel8x/app/Providers/RouteServiceProvider.php deleted file mode 100644 index 3bd3c81eb2b..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Providers/RouteServiceProvider.php +++ /dev/null @@ -1,63 +0,0 @@ -configureRateLimiting(); - - $this->routes(function () { - Route::prefix('api') - ->middleware('api') - ->namespace($this->namespace) - ->group(base_path('routes/api.php')); - - Route::middleware('web') - ->namespace($this->namespace) - ->group(base_path('routes/web.php')); - }); - } - - /** - * Configure the rate limiters for the application. - * - * @return void - */ - protected function configureRateLimiting() - { - RateLimiter::for('api', function (Request $request) { - return Limit::perMinute(60)->by(optional($request->user())->id ?: $request->ip()); - }); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/artisan b/appsec/tests/integration/src/test/www/laravel8x/artisan deleted file mode 100755 index 67a3329b183..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/artisan +++ /dev/null @@ -1,53 +0,0 @@ -#!/usr/bin/env php -make(Illuminate\Contracts\Console\Kernel::class); - -$status = $kernel->handle( - $input = new Symfony\Component\Console\Input\ArgvInput, - new Symfony\Component\Console\Output\ConsoleOutput -); - -/* -|-------------------------------------------------------------------------- -| Shutdown The Application -|-------------------------------------------------------------------------- -| -| Once Artisan has finished running, we will fire off the shutdown events -| so that any final work may be done by the application before we shut -| down the process. This is the last thing to happen to the request. -| -*/ - -$kernel->terminate($input, $status); - -exit($status); diff --git a/appsec/tests/integration/src/test/www/laravel8x/bootstrap/app.php b/appsec/tests/integration/src/test/www/laravel8x/bootstrap/app.php deleted file mode 100644 index 037e17df03b..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/bootstrap/app.php +++ /dev/null @@ -1,55 +0,0 @@ -singleton( - Illuminate\Contracts\Http\Kernel::class, - App\Http\Kernel::class -); - -$app->singleton( - Illuminate\Contracts\Console\Kernel::class, - App\Console\Kernel::class -); - -$app->singleton( - Illuminate\Contracts\Debug\ExceptionHandler::class, - App\Exceptions\Handler::class -); - -/* -|-------------------------------------------------------------------------- -| Return The Application -|-------------------------------------------------------------------------- -| -| This script returns the application instance. The instance is given to -| the calling script so we can separate the building of the instances -| from the actual running of the application and sending responses. -| -*/ - -return $app; diff --git a/appsec/tests/integration/src/test/www/laravel8x/bootstrap/cache/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/bootstrap/cache/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/bootstrap/cache/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/composer.json b/appsec/tests/integration/src/test/www/laravel8x/composer.json deleted file mode 100644 index f25304fb6ce..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/composer.json +++ /dev/null @@ -1,65 +0,0 @@ -{ - "name": "laravel/laravel", - "type": "project", - "description": "The Laravel Framework.", - "keywords": ["framework", "laravel"], - "license": "MIT", - "require": { - "php": "^7.3|^8.0", - "fruitcake/laravel-cors": "^2.0", - "guzzlehttp/guzzle": "^7.0.1", - "laravel/framework": "^8.75", - "laravel/sanctum": "^2.11", - "laravel/tinker": "^2.5" - }, - "require-dev": { - "facade/ignition": "^2.5", - "fakerphp/faker": "^1.9.1", - "laravel/sail": "^1.0.1", - "mockery/mockery": "^1.4.4", - "nunomaduro/collision": "^5.10", - "phpunit/phpunit": "^9.5.10" - }, - "autoload": { - "psr-4": { - "App\\": "app/", - "Database\\Factories\\": "database/factories/", - "Database\\Seeders\\": "database/seeders/" - } - }, - "autoload-dev": { - "psr-4": { - "Tests\\": "tests/" - } - }, - "scripts": { - "post-autoload-dump": [ - "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump", - "@php artisan package:discover --ansi" - ], - "post-update-cmd": [ - "@php artisan vendor:publish --tag=laravel-assets --ansi --force" - ], - "post-root-package-install": [ - "@php -r \"file_exists('.env') || copy('.env.example', '.env');\"" - ], - "post-create-project-cmd": [ - "@php artisan key:generate --ansi" - ] - }, - "extra": { - "laravel": { - "dont-discover": [] - } - }, - "config": { - "optimize-autoloader": true, - "preferred-install": "dist", - "sort-packages": true, - "audit": { - "block-insecure": false - } - }, - "minimum-stability": "dev", - "prefer-stable": true -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/app.php b/appsec/tests/integration/src/test/www/laravel8x/config/app.php deleted file mode 100644 index a8d1a82e4ba..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/app.php +++ /dev/null @@ -1,235 +0,0 @@ - env('APP_NAME', 'Laravel'), - - /* - |-------------------------------------------------------------------------- - | Application Environment - |-------------------------------------------------------------------------- - | - | This value determines the "environment" your application is currently - | running in. This may determine how you prefer to configure various - | services the application utilizes. Set this in your ".env" file. - | - */ - - 'env' => env('APP_ENV', 'production'), - - /* - |-------------------------------------------------------------------------- - | Application Debug Mode - |-------------------------------------------------------------------------- - | - | When your application is in debug mode, detailed error messages with - | stack traces will be shown on every error that occurs within your - | application. If disabled, a simple generic error page is shown. - | - */ - - 'debug' => (bool) env('APP_DEBUG', false), - - /* - |-------------------------------------------------------------------------- - | Application URL - |-------------------------------------------------------------------------- - | - | This URL is used by the console to properly generate URLs when using - | the Artisan command line tool. You should set this to the root of - | your application so that it is used when running Artisan tasks. - | - */ - - 'url' => env('APP_URL', 'http://localhost'), - - 'asset_url' => env('ASSET_URL', null), - - /* - |-------------------------------------------------------------------------- - | Application Timezone - |-------------------------------------------------------------------------- - | - | Here you may specify the default timezone for your application, which - | will be used by the PHP date and date-time functions. We have gone - | ahead and set this to a sensible default for you out of the box. - | - */ - - 'timezone' => 'UTC', - - /* - |-------------------------------------------------------------------------- - | Application Locale Configuration - |-------------------------------------------------------------------------- - | - | The application locale determines the default locale that will be used - | by the translation service provider. You are free to set this value - | to any of the locales which will be supported by the application. - | - */ - - 'locale' => 'en', - - /* - |-------------------------------------------------------------------------- - | Application Fallback Locale - |-------------------------------------------------------------------------- - | - | The fallback locale determines the locale to use when the current one - | is not available. You may change the value to correspond to any of - | the language folders that are provided through your application. - | - */ - - 'fallback_locale' => 'en', - - /* - |-------------------------------------------------------------------------- - | Faker Locale - |-------------------------------------------------------------------------- - | - | This locale will be used by the Faker PHP library when generating fake - | data for your database seeds. For example, this will be used to get - | localized telephone numbers, street address information and more. - | - */ - - 'faker_locale' => 'en_US', - - /* - |-------------------------------------------------------------------------- - | Encryption Key - |-------------------------------------------------------------------------- - | - | This key is used by the Illuminate encrypter service and should be set - | to a random, 32 character string, otherwise these encrypted strings - | will not be safe. Please do this before deploying an application! - | - */ - - 'key' => env('APP_KEY'), - - 'cipher' => 'AES-256-CBC', - - /* - |-------------------------------------------------------------------------- - | Autoloaded Service Providers - |-------------------------------------------------------------------------- - | - | The service providers listed here will be automatically loaded on the - | request to your application. Feel free to add your own services to - | this array to grant expanded functionality to your applications. - | - */ - - 'providers' => [ - - /* - * Laravel Framework Service Providers... - */ - Illuminate\Auth\AuthServiceProvider::class, - Illuminate\Broadcasting\BroadcastServiceProvider::class, - Illuminate\Bus\BusServiceProvider::class, - Illuminate\Cache\CacheServiceProvider::class, - Illuminate\Foundation\Providers\ConsoleSupportServiceProvider::class, - Illuminate\Cookie\CookieServiceProvider::class, - Illuminate\Database\DatabaseServiceProvider::class, - Illuminate\Encryption\EncryptionServiceProvider::class, - Illuminate\Filesystem\FilesystemServiceProvider::class, - Illuminate\Foundation\Providers\FoundationServiceProvider::class, - Illuminate\Hashing\HashServiceProvider::class, - Illuminate\Mail\MailServiceProvider::class, - Illuminate\Notifications\NotificationServiceProvider::class, - Illuminate\Pagination\PaginationServiceProvider::class, - Illuminate\Pipeline\PipelineServiceProvider::class, - Illuminate\Queue\QueueServiceProvider::class, - Illuminate\Redis\RedisServiceProvider::class, - Illuminate\Auth\Passwords\PasswordResetServiceProvider::class, - Illuminate\Session\SessionServiceProvider::class, - Illuminate\Translation\TranslationServiceProvider::class, - Illuminate\Validation\ValidationServiceProvider::class, - Illuminate\View\ViewServiceProvider::class, - - /* - * Package Service Providers... - */ - - /* - * Application Service Providers... - */ - App\Providers\AppServiceProvider::class, - App\Providers\AuthServiceProvider::class, - // App\Providers\BroadcastServiceProvider::class, - App\Providers\EventServiceProvider::class, - App\Providers\RouteServiceProvider::class, - - ], - - /* - |-------------------------------------------------------------------------- - | Class Aliases - |-------------------------------------------------------------------------- - | - | This array of class aliases will be registered when this application - | is started. However, feel free to register as many as you wish as - | the aliases are "lazy" loaded so they don't hinder performance. - | - */ - - 'aliases' => [ - - 'App' => Illuminate\Support\Facades\App::class, - 'Arr' => Illuminate\Support\Arr::class, - 'Artisan' => Illuminate\Support\Facades\Artisan::class, - 'Auth' => Illuminate\Support\Facades\Auth::class, - 'Blade' => Illuminate\Support\Facades\Blade::class, - 'Broadcast' => Illuminate\Support\Facades\Broadcast::class, - 'Bus' => Illuminate\Support\Facades\Bus::class, - 'Cache' => Illuminate\Support\Facades\Cache::class, - 'Config' => Illuminate\Support\Facades\Config::class, - 'Cookie' => Illuminate\Support\Facades\Cookie::class, - 'Crypt' => Illuminate\Support\Facades\Crypt::class, - 'Date' => Illuminate\Support\Facades\Date::class, - 'DB' => Illuminate\Support\Facades\DB::class, - 'Eloquent' => Illuminate\Database\Eloquent\Model::class, - 'Event' => Illuminate\Support\Facades\Event::class, - 'File' => Illuminate\Support\Facades\File::class, - 'Gate' => Illuminate\Support\Facades\Gate::class, - 'Hash' => Illuminate\Support\Facades\Hash::class, - 'Http' => Illuminate\Support\Facades\Http::class, - 'Js' => Illuminate\Support\Js::class, - 'Lang' => Illuminate\Support\Facades\Lang::class, - 'Log' => Illuminate\Support\Facades\Log::class, - 'Mail' => Illuminate\Support\Facades\Mail::class, - 'Notification' => Illuminate\Support\Facades\Notification::class, - 'Password' => Illuminate\Support\Facades\Password::class, - 'Queue' => Illuminate\Support\Facades\Queue::class, - 'RateLimiter' => Illuminate\Support\Facades\RateLimiter::class, - 'Redirect' => Illuminate\Support\Facades\Redirect::class, - // 'Redis' => Illuminate\Support\Facades\Redis::class, - 'Request' => Illuminate\Support\Facades\Request::class, - 'Response' => Illuminate\Support\Facades\Response::class, - 'Route' => Illuminate\Support\Facades\Route::class, - 'Schema' => Illuminate\Support\Facades\Schema::class, - 'Session' => Illuminate\Support\Facades\Session::class, - 'Storage' => Illuminate\Support\Facades\Storage::class, - 'Str' => Illuminate\Support\Str::class, - 'URL' => Illuminate\Support\Facades\URL::class, - 'Validator' => Illuminate\Support\Facades\Validator::class, - 'View' => Illuminate\Support\Facades\View::class, - - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/auth.php b/appsec/tests/integration/src/test/www/laravel8x/config/auth.php deleted file mode 100644 index d8c6cee7c19..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/auth.php +++ /dev/null @@ -1,111 +0,0 @@ - [ - 'guard' => 'web', - 'passwords' => 'users', - ], - - /* - |-------------------------------------------------------------------------- - | Authentication Guards - |-------------------------------------------------------------------------- - | - | Next, you may define every authentication guard for your application. - | Of course, a great default configuration has been defined for you - | here which uses session storage and the Eloquent user provider. - | - | All authentication drivers have a user provider. This defines how the - | users are actually retrieved out of your database or other storage - | mechanisms used by this application to persist your user's data. - | - | Supported: "session" - | - */ - - 'guards' => [ - 'web' => [ - 'driver' => 'session', - 'provider' => 'users', - ], - ], - - /* - |-------------------------------------------------------------------------- - | User Providers - |-------------------------------------------------------------------------- - | - | All authentication drivers have a user provider. This defines how the - | users are actually retrieved out of your database or other storage - | mechanisms used by this application to persist your user's data. - | - | If you have multiple user tables or models you may configure multiple - | sources which represent each model / table. These sources may then - | be assigned to any extra authentication guards you have defined. - | - | Supported: "database", "eloquent" - | - */ - - 'providers' => [ - 'users' => [ - 'driver' => 'eloquent', - 'model' => App\Models\User::class, - ], - - // 'users' => [ - // 'driver' => 'database', - // 'table' => 'users', - // ], - ], - - /* - |-------------------------------------------------------------------------- - | Resetting Passwords - |-------------------------------------------------------------------------- - | - | You may specify multiple password reset configurations if you have more - | than one user table or model in the application and you want to have - | separate password reset settings based on the specific user types. - | - | The expire time is the number of minutes that each reset token will be - | considered valid. This security feature keeps tokens short-lived so - | they have less time to be guessed. You may change this as needed. - | - */ - - 'passwords' => [ - 'users' => [ - 'provider' => 'users', - 'table' => 'password_resets', - 'expire' => 60, - 'throttle' => 60, - ], - ], - - /* - |-------------------------------------------------------------------------- - | Password Confirmation Timeout - |-------------------------------------------------------------------------- - | - | Here you may define the amount of seconds before a password confirmation - | times out and the user is prompted to re-enter their password via the - | confirmation screen. By default, the timeout lasts for three hours. - | - */ - - 'password_timeout' => 10800, - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/broadcasting.php b/appsec/tests/integration/src/test/www/laravel8x/config/broadcasting.php deleted file mode 100644 index 2d529820cc5..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/broadcasting.php +++ /dev/null @@ -1,64 +0,0 @@ - env('BROADCAST_DRIVER', 'null'), - - /* - |-------------------------------------------------------------------------- - | Broadcast Connections - |-------------------------------------------------------------------------- - | - | Here you may define all of the broadcast connections that will be used - | to broadcast events to other systems or over websockets. Samples of - | each available type of connection are provided inside this array. - | - */ - - 'connections' => [ - - 'pusher' => [ - 'driver' => 'pusher', - 'key' => env('PUSHER_APP_KEY'), - 'secret' => env('PUSHER_APP_SECRET'), - 'app_id' => env('PUSHER_APP_ID'), - 'options' => [ - 'cluster' => env('PUSHER_APP_CLUSTER'), - 'useTLS' => true, - ], - ], - - 'ably' => [ - 'driver' => 'ably', - 'key' => env('ABLY_KEY'), - ], - - 'redis' => [ - 'driver' => 'redis', - 'connection' => 'default', - ], - - 'log' => [ - 'driver' => 'log', - ], - - 'null' => [ - 'driver' => 'null', - ], - - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/cache.php b/appsec/tests/integration/src/test/www/laravel8x/config/cache.php deleted file mode 100644 index 8736c7a7a38..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/cache.php +++ /dev/null @@ -1,110 +0,0 @@ - env('CACHE_DRIVER', 'file'), - - /* - |-------------------------------------------------------------------------- - | Cache Stores - |-------------------------------------------------------------------------- - | - | Here you may define all of the cache "stores" for your application as - | well as their drivers. You may even define multiple stores for the - | same cache driver to group types of items stored in your caches. - | - | Supported drivers: "apc", "array", "database", "file", - | "memcached", "redis", "dynamodb", "octane", "null" - | - */ - - 'stores' => [ - - 'apc' => [ - 'driver' => 'apc', - ], - - 'array' => [ - 'driver' => 'array', - 'serialize' => false, - ], - - 'database' => [ - 'driver' => 'database', - 'table' => 'cache', - 'connection' => null, - 'lock_connection' => null, - ], - - 'file' => [ - 'driver' => 'file', - 'path' => storage_path('framework/cache/data'), - ], - - 'memcached' => [ - 'driver' => 'memcached', - 'persistent_id' => env('MEMCACHED_PERSISTENT_ID'), - 'sasl' => [ - env('MEMCACHED_USERNAME'), - env('MEMCACHED_PASSWORD'), - ], - 'options' => [ - // Memcached::OPT_CONNECT_TIMEOUT => 2000, - ], - 'servers' => [ - [ - 'host' => env('MEMCACHED_HOST', '127.0.0.1'), - 'port' => env('MEMCACHED_PORT', 11211), - 'weight' => 100, - ], - ], - ], - - 'redis' => [ - 'driver' => 'redis', - 'connection' => 'cache', - 'lock_connection' => 'default', - ], - - 'dynamodb' => [ - 'driver' => 'dynamodb', - 'key' => env('AWS_ACCESS_KEY_ID'), - 'secret' => env('AWS_SECRET_ACCESS_KEY'), - 'region' => env('AWS_DEFAULT_REGION', 'us-east-1'), - 'table' => env('DYNAMODB_CACHE_TABLE', 'cache'), - 'endpoint' => env('DYNAMODB_ENDPOINT'), - ], - - 'octane' => [ - 'driver' => 'octane', - ], - - ], - - /* - |-------------------------------------------------------------------------- - | Cache Key Prefix - |-------------------------------------------------------------------------- - | - | When utilizing a RAM based store such as APC or Memcached, there might - | be other applications utilizing the same cache. So, we'll specify a - | value to get prefixed to all our keys so we can avoid collisions. - | - */ - - 'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_cache'), - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/cors.php b/appsec/tests/integration/src/test/www/laravel8x/config/cors.php deleted file mode 100644 index 8a39e6daa63..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/cors.php +++ /dev/null @@ -1,34 +0,0 @@ - ['api/*', 'sanctum/csrf-cookie'], - - 'allowed_methods' => ['*'], - - 'allowed_origins' => ['*'], - - 'allowed_origins_patterns' => [], - - 'allowed_headers' => ['*'], - - 'exposed_headers' => [], - - 'max_age' => 0, - - 'supports_credentials' => false, - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/database.php b/appsec/tests/integration/src/test/www/laravel8x/config/database.php deleted file mode 100644 index b42d9b30a54..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/database.php +++ /dev/null @@ -1,147 +0,0 @@ - env('DB_CONNECTION', 'mysql'), - - /* - |-------------------------------------------------------------------------- - | Database Connections - |-------------------------------------------------------------------------- - | - | Here are each of the database connections setup for your application. - | Of course, examples of configuring each database platform that is - | supported by Laravel is shown below to make development simple. - | - | - | All database work in Laravel is done through the PHP PDO facilities - | so make sure you have the driver for your particular database of - | choice installed on your machine before you begin development. - | - */ - - 'connections' => [ - - 'sqlite' => [ - 'driver' => 'sqlite', - 'url' => env('DATABASE_URL'), - 'database' => env('DB_DATABASE', database_path('database.sqlite')), - 'prefix' => '', - 'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true), - ], - - 'mysql' => [ - 'driver' => 'mysql', - 'url' => env('DATABASE_URL'), - 'host' => env('DB_HOST', '127.0.0.1'), - 'port' => env('DB_PORT', '3306'), - 'database' => env('DB_DATABASE', 'forge'), - 'username' => env('DB_USERNAME', 'forge'), - 'password' => env('DB_PASSWORD', ''), - 'unix_socket' => env('DB_SOCKET', ''), - 'charset' => 'utf8mb4', - 'collation' => 'utf8mb4_unicode_ci', - 'prefix' => '', - 'prefix_indexes' => true, - 'strict' => true, - 'engine' => null, - 'options' => extension_loaded('pdo_mysql') ? array_filter([ - PDO::MYSQL_ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'), - ]) : [], - ], - - 'pgsql' => [ - 'driver' => 'pgsql', - 'url' => env('DATABASE_URL'), - 'host' => env('DB_HOST', '127.0.0.1'), - 'port' => env('DB_PORT', '5432'), - 'database' => env('DB_DATABASE', 'forge'), - 'username' => env('DB_USERNAME', 'forge'), - 'password' => env('DB_PASSWORD', ''), - 'charset' => 'utf8', - 'prefix' => '', - 'prefix_indexes' => true, - 'schema' => 'public', - 'sslmode' => 'prefer', - ], - - 'sqlsrv' => [ - 'driver' => 'sqlsrv', - 'url' => env('DATABASE_URL'), - 'host' => env('DB_HOST', 'localhost'), - 'port' => env('DB_PORT', '1433'), - 'database' => env('DB_DATABASE', 'forge'), - 'username' => env('DB_USERNAME', 'forge'), - 'password' => env('DB_PASSWORD', ''), - 'charset' => 'utf8', - 'prefix' => '', - 'prefix_indexes' => true, - ], - - ], - - /* - |-------------------------------------------------------------------------- - | Migration Repository Table - |-------------------------------------------------------------------------- - | - | This table keeps track of all the migrations that have already run for - | your application. Using this information, we can determine which of - | the migrations on disk haven't actually been run in the database. - | - */ - - 'migrations' => 'migrations', - - /* - |-------------------------------------------------------------------------- - | Redis Databases - |-------------------------------------------------------------------------- - | - | Redis is an open source, fast, and advanced key-value store that also - | provides a richer body of commands than a typical key-value system - | such as APC or Memcached. Laravel makes it easy to dig right in. - | - */ - - 'redis' => [ - - 'client' => env('REDIS_CLIENT', 'phpredis'), - - 'options' => [ - 'cluster' => env('REDIS_CLUSTER', 'redis'), - 'prefix' => env('REDIS_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_database_'), - ], - - 'default' => [ - 'url' => env('REDIS_URL'), - 'host' => env('REDIS_HOST', '127.0.0.1'), - 'password' => env('REDIS_PASSWORD', null), - 'port' => env('REDIS_PORT', '6379'), - 'database' => env('REDIS_DB', '0'), - ], - - 'cache' => [ - 'url' => env('REDIS_URL'), - 'host' => env('REDIS_HOST', '127.0.0.1'), - 'password' => env('REDIS_PASSWORD', null), - 'port' => env('REDIS_PORT', '6379'), - 'database' => env('REDIS_CACHE_DB', '1'), - ], - - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/filesystems.php b/appsec/tests/integration/src/test/www/laravel8x/config/filesystems.php deleted file mode 100644 index 760ef9728b7..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/filesystems.php +++ /dev/null @@ -1,73 +0,0 @@ - env('FILESYSTEM_DRIVER', 'local'), - - /* - |-------------------------------------------------------------------------- - | Filesystem Disks - |-------------------------------------------------------------------------- - | - | Here you may configure as many filesystem "disks" as you wish, and you - | may even configure multiple disks of the same driver. Defaults have - | been setup for each driver as an example of the required options. - | - | Supported Drivers: "local", "ftp", "sftp", "s3" - | - */ - - 'disks' => [ - - 'local' => [ - 'driver' => 'local', - 'root' => storage_path('app'), - ], - - 'public' => [ - 'driver' => 'local', - 'root' => storage_path('app/public'), - 'url' => env('APP_URL').'/storage', - 'visibility' => 'public', - ], - - 's3' => [ - 'driver' => 's3', - 'key' => env('AWS_ACCESS_KEY_ID'), - 'secret' => env('AWS_SECRET_ACCESS_KEY'), - 'region' => env('AWS_DEFAULT_REGION'), - 'bucket' => env('AWS_BUCKET'), - 'url' => env('AWS_URL'), - 'endpoint' => env('AWS_ENDPOINT'), - 'use_path_style_endpoint' => env('AWS_USE_PATH_STYLE_ENDPOINT', false), - ], - - ], - - /* - |-------------------------------------------------------------------------- - | Symbolic Links - |-------------------------------------------------------------------------- - | - | Here you may configure the symbolic links that will be created when the - | `storage:link` Artisan command is executed. The array keys should be - | the locations of the links and the values should be their targets. - | - */ - - 'links' => [ - public_path('storage') => storage_path('app/public'), - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/hashing.php b/appsec/tests/integration/src/test/www/laravel8x/config/hashing.php deleted file mode 100644 index bcd3be4c28a..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/hashing.php +++ /dev/null @@ -1,52 +0,0 @@ - 'bcrypt', - - /* - |-------------------------------------------------------------------------- - | Bcrypt Options - |-------------------------------------------------------------------------- - | - | Here you may specify the configuration options that should be used when - | passwords are hashed using the Bcrypt algorithm. This will allow you - | to control the amount of time it takes to hash the given password. - | - */ - - 'bcrypt' => [ - 'rounds' => env('BCRYPT_ROUNDS', 10), - ], - - /* - |-------------------------------------------------------------------------- - | Argon Options - |-------------------------------------------------------------------------- - | - | Here you may specify the configuration options that should be used when - | passwords are hashed using the Argon algorithm. These will allow you - | to control the amount of time it takes to hash the given password. - | - */ - - 'argon' => [ - 'memory' => 65536, - 'threads' => 1, - 'time' => 4, - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/logging.php b/appsec/tests/integration/src/test/www/laravel8x/config/logging.php deleted file mode 100644 index 4050d76eac3..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/logging.php +++ /dev/null @@ -1,118 +0,0 @@ - env('LOG_CHANNEL', 'stack'), - - /* - |-------------------------------------------------------------------------- - | Deprecations Log Channel - |-------------------------------------------------------------------------- - | - | This option controls the log channel that should be used to log warnings - | regarding deprecated PHP and library features. This allows you to get - | your application ready for upcoming major versions of dependencies. - | - */ - - 'deprecations' => env('LOG_DEPRECATIONS_CHANNEL', 'null'), - - /* - |-------------------------------------------------------------------------- - | Log Channels - |-------------------------------------------------------------------------- - | - | Here you may configure the log channels for your application. Out of - | the box, Laravel uses the Monolog PHP logging library. This gives - | you a variety of powerful log handlers / formatters to utilize. - | - | Available Drivers: "single", "daily", "slack", "syslog", - | "errorlog", "monolog", - | "custom", "stack" - | - */ - - 'channels' => [ - 'stack' => [ - 'driver' => 'stack', - 'channels' => ['single'], - 'ignore_exceptions' => false, - ], - - 'single' => [ - 'driver' => 'single', - 'path' => '/tmp/logs/laravel/laravel.log', - 'level' => env('LOG_LEVEL', 'debug'), - ], - - 'daily' => [ - 'driver' => 'daily', - 'path' => '/tmp/logs/laravel/laravel.log', - 'level' => env('LOG_LEVEL', 'debug'), - 'days' => 14, - ], - - 'slack' => [ - 'driver' => 'slack', - 'url' => env('LOG_SLACK_WEBHOOK_URL'), - 'username' => 'Laravel Log', - 'emoji' => ':boom:', - 'level' => env('LOG_LEVEL', 'critical'), - ], - - 'papertrail' => [ - 'driver' => 'monolog', - 'level' => env('LOG_LEVEL', 'debug'), - 'handler' => SyslogUdpHandler::class, - 'handler_with' => [ - 'host' => env('PAPERTRAIL_URL'), - 'port' => env('PAPERTRAIL_PORT'), - ], - ], - - 'stderr' => [ - 'driver' => 'monolog', - 'level' => env('LOG_LEVEL', 'debug'), - 'handler' => StreamHandler::class, - 'formatter' => env('LOG_STDERR_FORMATTER'), - 'with' => [ - 'stream' => 'php://stderr', - ], - ], - - 'syslog' => [ - 'driver' => 'syslog', - 'level' => env('LOG_LEVEL', 'debug'), - ], - - 'errorlog' => [ - 'driver' => 'errorlog', - 'level' => env('LOG_LEVEL', 'debug'), - ], - - 'null' => [ - 'driver' => 'monolog', - 'handler' => NullHandler::class, - ], - - 'emergency' => [ - 'path' => '/tmp/logs/laravel/laravel.log', - ], - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/mail.php b/appsec/tests/integration/src/test/www/laravel8x/config/mail.php deleted file mode 100644 index f96c6c7c355..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/mail.php +++ /dev/null @@ -1,118 +0,0 @@ - env('MAIL_MAILER', 'smtp'), - - /* - |-------------------------------------------------------------------------- - | Mailer Configurations - |-------------------------------------------------------------------------- - | - | Here you may configure all of the mailers used by your application plus - | their respective settings. Several examples have been configured for - | you and you are free to add your own as your application requires. - | - | Laravel supports a variety of mail "transport" drivers to be used while - | sending an e-mail. You will specify which one you are using for your - | mailers below. You are free to add additional mailers as required. - | - | Supported: "smtp", "sendmail", "mailgun", "ses", - | "postmark", "log", "array", "failover" - | - */ - - 'mailers' => [ - 'smtp' => [ - 'transport' => 'smtp', - 'host' => env('MAIL_HOST', 'smtp.mailgun.org'), - 'port' => env('MAIL_PORT', 587), - 'encryption' => env('MAIL_ENCRYPTION', 'tls'), - 'username' => env('MAIL_USERNAME'), - 'password' => env('MAIL_PASSWORD'), - 'timeout' => null, - 'auth_mode' => null, - ], - - 'ses' => [ - 'transport' => 'ses', - ], - - 'mailgun' => [ - 'transport' => 'mailgun', - ], - - 'postmark' => [ - 'transport' => 'postmark', - ], - - 'sendmail' => [ - 'transport' => 'sendmail', - 'path' => env('MAIL_SENDMAIL_PATH', '/usr/sbin/sendmail -t -i'), - ], - - 'log' => [ - 'transport' => 'log', - 'channel' => env('MAIL_LOG_CHANNEL'), - ], - - 'array' => [ - 'transport' => 'array', - ], - - 'failover' => [ - 'transport' => 'failover', - 'mailers' => [ - 'smtp', - 'log', - ], - ], - ], - - /* - |-------------------------------------------------------------------------- - | Global "From" Address - |-------------------------------------------------------------------------- - | - | You may wish for all e-mails sent by your application to be sent from - | the same address. Here, you may specify a name and address that is - | used globally for all e-mails that are sent by your application. - | - */ - - 'from' => [ - 'address' => env('MAIL_FROM_ADDRESS', 'hello@example.com'), - 'name' => env('MAIL_FROM_NAME', 'Example'), - ], - - /* - |-------------------------------------------------------------------------- - | Markdown Mail Settings - |-------------------------------------------------------------------------- - | - | If you are using Markdown based email rendering, you may configure your - | theme and component paths here, allowing you to customize the design - | of the emails. Or, you may simply stick with the Laravel defaults! - | - */ - - 'markdown' => [ - 'theme' => 'default', - - 'paths' => [ - resource_path('views/vendor/mail'), - ], - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/queue.php b/appsec/tests/integration/src/test/www/laravel8x/config/queue.php deleted file mode 100644 index 25ea5a81935..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/queue.php +++ /dev/null @@ -1,93 +0,0 @@ - env('QUEUE_CONNECTION', 'sync'), - - /* - |-------------------------------------------------------------------------- - | Queue Connections - |-------------------------------------------------------------------------- - | - | Here you may configure the connection information for each server that - | is used by your application. A default configuration has been added - | for each back-end shipped with Laravel. You are free to add more. - | - | Drivers: "sync", "database", "beanstalkd", "sqs", "redis", "null" - | - */ - - 'connections' => [ - - 'sync' => [ - 'driver' => 'sync', - ], - - 'database' => [ - 'driver' => 'database', - 'table' => 'jobs', - 'queue' => 'default', - 'retry_after' => 90, - 'after_commit' => false, - ], - - 'beanstalkd' => [ - 'driver' => 'beanstalkd', - 'host' => 'localhost', - 'queue' => 'default', - 'retry_after' => 90, - 'block_for' => 0, - 'after_commit' => false, - ], - - 'sqs' => [ - 'driver' => 'sqs', - 'key' => env('AWS_ACCESS_KEY_ID'), - 'secret' => env('AWS_SECRET_ACCESS_KEY'), - 'prefix' => env('SQS_PREFIX', 'https://sqs.us-east-1.amazonaws.com/your-account-id'), - 'queue' => env('SQS_QUEUE', 'default'), - 'suffix' => env('SQS_SUFFIX'), - 'region' => env('AWS_DEFAULT_REGION', 'us-east-1'), - 'after_commit' => false, - ], - - 'redis' => [ - 'driver' => 'redis', - 'connection' => 'default', - 'queue' => env('REDIS_QUEUE', 'default'), - 'retry_after' => 90, - 'block_for' => null, - 'after_commit' => false, - ], - - ], - - /* - |-------------------------------------------------------------------------- - | Failed Queue Jobs - |-------------------------------------------------------------------------- - | - | These options configure the behavior of failed queue job logging so you - | can control which database and table are used to store the jobs that - | have failed. You may change them to any database / table you wish. - | - */ - - 'failed' => [ - 'driver' => env('QUEUE_FAILED_DRIVER', 'database-uuids'), - 'database' => env('DB_CONNECTION', 'mysql'), - 'table' => 'failed_jobs', - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/sanctum.php b/appsec/tests/integration/src/test/www/laravel8x/config/sanctum.php deleted file mode 100644 index 9281c92db06..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/sanctum.php +++ /dev/null @@ -1,65 +0,0 @@ - explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf( - '%s%s', - 'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1', - env('APP_URL') ? ','.parse_url(env('APP_URL'), PHP_URL_HOST) : '' - ))), - - /* - |-------------------------------------------------------------------------- - | Sanctum Guards - |-------------------------------------------------------------------------- - | - | This array contains the authentication guards that will be checked when - | Sanctum is trying to authenticate a request. If none of these guards - | are able to authenticate the request, Sanctum will use the bearer - | token that's present on an incoming request for authentication. - | - */ - - 'guard' => ['web'], - - /* - |-------------------------------------------------------------------------- - | Expiration Minutes - |-------------------------------------------------------------------------- - | - | This value controls the number of minutes until an issued token will be - | considered expired. If this value is null, personal access tokens do - | not expire. This won't tweak the lifetime of first-party sessions. - | - */ - - 'expiration' => null, - - /* - |-------------------------------------------------------------------------- - | Sanctum Middleware - |-------------------------------------------------------------------------- - | - | When authenticating your first-party SPA with Sanctum you may need to - | customize some of the middleware Sanctum uses while processing the - | request. You may change the middleware listed below as required. - | - */ - - 'middleware' => [ - 'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class, - 'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class, - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/services.php b/appsec/tests/integration/src/test/www/laravel8x/config/services.php deleted file mode 100644 index 2a1d616c774..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/services.php +++ /dev/null @@ -1,33 +0,0 @@ - [ - 'domain' => env('MAILGUN_DOMAIN'), - 'secret' => env('MAILGUN_SECRET'), - 'endpoint' => env('MAILGUN_ENDPOINT', 'api.mailgun.net'), - ], - - 'postmark' => [ - 'token' => env('POSTMARK_TOKEN'), - ], - - 'ses' => [ - 'key' => env('AWS_ACCESS_KEY_ID'), - 'secret' => env('AWS_SECRET_ACCESS_KEY'), - 'region' => env('AWS_DEFAULT_REGION', 'us-east-1'), - ], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/session.php b/appsec/tests/integration/src/test/www/laravel8x/config/session.php deleted file mode 100644 index ac0802b19cc..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/session.php +++ /dev/null @@ -1,201 +0,0 @@ - env('SESSION_DRIVER', 'file'), - - /* - |-------------------------------------------------------------------------- - | Session Lifetime - |-------------------------------------------------------------------------- - | - | Here you may specify the number of minutes that you wish the session - | to be allowed to remain idle before it expires. If you want them - | to immediately expire on the browser closing, set that option. - | - */ - - 'lifetime' => env('SESSION_LIFETIME', 120), - - 'expire_on_close' => false, - - /* - |-------------------------------------------------------------------------- - | Session Encryption - |-------------------------------------------------------------------------- - | - | This option allows you to easily specify that all of your session data - | should be encrypted before it is stored. All encryption will be run - | automatically by Laravel and you can use the Session like normal. - | - */ - - 'encrypt' => false, - - /* - |-------------------------------------------------------------------------- - | Session File Location - |-------------------------------------------------------------------------- - | - | When using the native session driver, we need a location where session - | files may be stored. A default has been set for you but a different - | location may be specified. This is only needed for file sessions. - | - */ - - 'files' => storage_path('framework/sessions'), - - /* - |-------------------------------------------------------------------------- - | Session Database Connection - |-------------------------------------------------------------------------- - | - | When using the "database" or "redis" session drivers, you may specify a - | connection that should be used to manage these sessions. This should - | correspond to a connection in your database configuration options. - | - */ - - 'connection' => env('SESSION_CONNECTION', null), - - /* - |-------------------------------------------------------------------------- - | Session Database Table - |-------------------------------------------------------------------------- - | - | When using the "database" session driver, you may specify the table we - | should use to manage the sessions. Of course, a sensible default is - | provided for you; however, you are free to change this as needed. - | - */ - - 'table' => 'sessions', - - /* - |-------------------------------------------------------------------------- - | Session Cache Store - |-------------------------------------------------------------------------- - | - | While using one of the framework's cache driven session backends you may - | list a cache store that should be used for these sessions. This value - | must match with one of the application's configured cache "stores". - | - | Affects: "apc", "dynamodb", "memcached", "redis" - | - */ - - 'store' => env('SESSION_STORE', null), - - /* - |-------------------------------------------------------------------------- - | Session Sweeping Lottery - |-------------------------------------------------------------------------- - | - | Some session drivers must manually sweep their storage location to get - | rid of old sessions from storage. Here are the chances that it will - | happen on a given request. By default, the odds are 2 out of 100. - | - */ - - 'lottery' => [2, 100], - - /* - |-------------------------------------------------------------------------- - | Session Cookie Name - |-------------------------------------------------------------------------- - | - | Here you may change the name of the cookie used to identify a session - | instance by ID. The name specified here will get used every time a - | new session cookie is created by the framework for every driver. - | - */ - - 'cookie' => env( - 'SESSION_COOKIE', - Str::slug(env('APP_NAME', 'laravel'), '_').'_session' - ), - - /* - |-------------------------------------------------------------------------- - | Session Cookie Path - |-------------------------------------------------------------------------- - | - | The session cookie path determines the path for which the cookie will - | be regarded as available. Typically, this will be the root path of - | your application but you are free to change this when necessary. - | - */ - - 'path' => '/', - - /* - |-------------------------------------------------------------------------- - | Session Cookie Domain - |-------------------------------------------------------------------------- - | - | Here you may change the domain of the cookie used to identify a session - | in your application. This will determine which domains the cookie is - | available to in your application. A sensible default has been set. - | - */ - - 'domain' => env('SESSION_DOMAIN', null), - - /* - |-------------------------------------------------------------------------- - | HTTPS Only Cookies - |-------------------------------------------------------------------------- - | - | By setting this option to true, session cookies will only be sent back - | to the server if the browser has a HTTPS connection. This will keep - | the cookie from being sent to you when it can't be done securely. - | - */ - - 'secure' => env('SESSION_SECURE_COOKIE'), - - /* - |-------------------------------------------------------------------------- - | HTTP Access Only - |-------------------------------------------------------------------------- - | - | Setting this value to true will prevent JavaScript from accessing the - | value of the cookie and the cookie will only be accessible through - | the HTTP protocol. You are free to modify this option if needed. - | - */ - - 'http_only' => true, - - /* - |-------------------------------------------------------------------------- - | Same-Site Cookies - |-------------------------------------------------------------------------- - | - | This option determines how your cookies behave when cross-site requests - | take place, and can be used to mitigate CSRF attacks. By default, we - | will set this value to "lax" since this is a secure default value. - | - | Supported: "lax", "strict", "none", null - | - */ - - 'same_site' => 'lax', - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/config/view.php b/appsec/tests/integration/src/test/www/laravel8x/config/view.php deleted file mode 100644 index 22b8a18d325..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/config/view.php +++ /dev/null @@ -1,36 +0,0 @@ - [ - resource_path('views'), - ], - - /* - |-------------------------------------------------------------------------- - | Compiled View Path - |-------------------------------------------------------------------------- - | - | This option determines where all the compiled Blade templates will be - | stored for your application. Typically, this is within the storage - | directory. However, as usual, you are free to change this value. - | - */ - - 'compiled' => env( - 'VIEW_COMPILED_PATH', - realpath(storage_path('framework/views')) - ), - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/database/.gitignore deleted file mode 100644 index 9b19b93c9f1..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/.gitignore +++ /dev/null @@ -1 +0,0 @@ -*.sqlite* diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/factories/UserFactory.php b/appsec/tests/integration/src/test/www/laravel8x/database/factories/UserFactory.php deleted file mode 100644 index a3eb239a946..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/factories/UserFactory.php +++ /dev/null @@ -1,39 +0,0 @@ - $this->faker->name(), - 'email' => $this->faker->unique()->safeEmail(), - 'email_verified_at' => now(), - 'password' => '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', // password - 'remember_token' => Str::random(10), - ]; - } - - /** - * Indicate that the model's email address should be unverified. - * - * @return \Illuminate\Database\Eloquent\Factories\Factory - */ - public function unverified() - { - return $this->state(function (array $attributes) { - return [ - 'email_verified_at' => null, - ]; - }); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_000000_create_users_table.php b/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_000000_create_users_table.php deleted file mode 100644 index 621a24eb734..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_000000_create_users_table.php +++ /dev/null @@ -1,36 +0,0 @@ -id(); - $table->string('name'); - $table->string('email')->unique(); - $table->timestamp('email_verified_at')->nullable(); - $table->string('password'); - $table->rememberToken(); - $table->timestamps(); - }); - } - - /** - * Reverse the migrations. - * - * @return void - */ - public function down() - { - Schema::dropIfExists('users'); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_100000_create_password_resets_table.php b/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_100000_create_password_resets_table.php deleted file mode 100644 index 0ee0a36a4f8..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2014_10_12_100000_create_password_resets_table.php +++ /dev/null @@ -1,32 +0,0 @@ -string('email')->index(); - $table->string('token'); - $table->timestamp('created_at')->nullable(); - }); - } - - /** - * Reverse the migrations. - * - * @return void - */ - public function down() - { - Schema::dropIfExists('password_resets'); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_08_19_000000_create_failed_jobs_table.php b/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_08_19_000000_create_failed_jobs_table.php deleted file mode 100644 index 6aa6d743e9c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_08_19_000000_create_failed_jobs_table.php +++ /dev/null @@ -1,36 +0,0 @@ -id(); - $table->string('uuid')->unique(); - $table->text('connection'); - $table->text('queue'); - $table->longText('payload'); - $table->longText('exception'); - $table->timestamp('failed_at')->useCurrent(); - }); - } - - /** - * Reverse the migrations. - * - * @return void - */ - public function down() - { - Schema::dropIfExists('failed_jobs'); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_12_14_000001_create_personal_access_tokens_table.php b/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_12_14_000001_create_personal_access_tokens_table.php deleted file mode 100644 index 4315e16a85a..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/migrations/2019_12_14_000001_create_personal_access_tokens_table.php +++ /dev/null @@ -1,36 +0,0 @@ -id(); - $table->morphs('tokenable'); - $table->string('name'); - $table->string('token', 64)->unique(); - $table->text('abilities')->nullable(); - $table->timestamp('last_used_at')->nullable(); - $table->timestamps(); - }); - } - - /** - * Reverse the migrations. - * - * @return void - */ - public function down() - { - Schema::dropIfExists('personal_access_tokens'); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/database/seeders/DatabaseSeeder.php b/appsec/tests/integration/src/test/www/laravel8x/database/seeders/DatabaseSeeder.php deleted file mode 100644 index f67b8694166..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/database/seeders/DatabaseSeeder.php +++ /dev/null @@ -1,24 +0,0 @@ -insert([ - 'name' => 'ciuser', - 'email' => 'ciuser@example.com', - 'password' => Hash::make('password'), - ]); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/initialize.sh b/appsec/tests/integration/src/test/www/laravel8x/initialize.sh deleted file mode 100755 index 327e27be49b..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/initialize.sh +++ /dev/null @@ -1,19 +0,0 @@ -#!/bin/bash -e - -cd /var/www - -export DD_TRACE_CLI_ENABLED=false - -composer install --no-dev -chown -R www-data.www-data vendor - -cp .env.example .env -php artisan key:generate -php artisan config:cache -touch /tmp/database.sqlite -php artisan migrate -php artisan db:seed -chown www-data.www-data /tmp/database.sqlite -chown -R www-data.www-data /var/www/storage -mkdir -p /tmp/logs/laravel -chown www-data.www-data /tmp/logs/laravel diff --git a/appsec/tests/integration/src/test/www/laravel8x/phpunit.xml b/appsec/tests/integration/src/test/www/laravel8x/phpunit.xml deleted file mode 100644 index 4ae4d979d1e..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/phpunit.xml +++ /dev/null @@ -1,31 +0,0 @@ - - - - - ./tests/Unit - - - ./tests/Feature - - - - - ./app - - - - - - - - - - - - - - diff --git a/appsec/tests/integration/src/test/www/laravel8x/public/.htaccess b/appsec/tests/integration/src/test/www/laravel8x/public/.htaccess deleted file mode 100644 index 3aec5e27e5d..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/public/.htaccess +++ /dev/null @@ -1,21 +0,0 @@ - - - Options -MultiViews -Indexes - - - RewriteEngine On - - # Handle Authorization Header - RewriteCond %{HTTP:Authorization} . - RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] - - # Redirect Trailing Slashes If Not A Folder... - RewriteCond %{REQUEST_FILENAME} !-d - RewriteCond %{REQUEST_URI} (.+)/$ - RewriteRule ^ %1 [L,R=301] - - # Send Requests To Front Controller... - RewriteCond %{REQUEST_FILENAME} !-d - RewriteCond %{REQUEST_FILENAME} !-f - RewriteRule ^ index.php [L] - diff --git a/appsec/tests/integration/src/test/www/laravel8x/public/favicon.ico b/appsec/tests/integration/src/test/www/laravel8x/public/favicon.ico deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/appsec/tests/integration/src/test/www/laravel8x/public/index.php b/appsec/tests/integration/src/test/www/laravel8x/public/index.php deleted file mode 100644 index 1d69f3a2890..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/public/index.php +++ /dev/null @@ -1,55 +0,0 @@ -make(Kernel::class); - -$response = $kernel->handle( - $request = Request::capture() -)->send(); - -$kernel->terminate($request, $response); diff --git a/appsec/tests/integration/src/test/www/laravel8x/public/outside_of_framework.php b/appsec/tests/integration/src/test/www/laravel8x/public/outside_of_framework.php deleted file mode 100644 index de1a1404f5c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/public/outside_of_framework.php +++ /dev/null @@ -1,3 +0,0 @@ - 'These credentials do not match our records.', - 'password' => 'The provided password is incorrect.', - 'throttle' => 'Too many login attempts. Please try again in :seconds seconds.', - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/pagination.php b/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/pagination.php deleted file mode 100644 index d4814118778..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/pagination.php +++ /dev/null @@ -1,19 +0,0 @@ - '« Previous', - 'next' => 'Next »', - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/passwords.php b/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/passwords.php deleted file mode 100644 index 2345a56b5a6..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/passwords.php +++ /dev/null @@ -1,22 +0,0 @@ - 'Your password has been reset!', - 'sent' => 'We have emailed your password reset link!', - 'throttled' => 'Please wait before retrying.', - 'token' => 'This password reset token is invalid.', - 'user' => "We can't find a user with that email address.", - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/validation.php b/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/validation.php deleted file mode 100644 index 783003cfcca..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/resources/lang/en/validation.php +++ /dev/null @@ -1,163 +0,0 @@ - 'The :attribute must be accepted.', - 'accepted_if' => 'The :attribute must be accepted when :other is :value.', - 'active_url' => 'The :attribute is not a valid URL.', - 'after' => 'The :attribute must be a date after :date.', - 'after_or_equal' => 'The :attribute must be a date after or equal to :date.', - 'alpha' => 'The :attribute must only contain letters.', - 'alpha_dash' => 'The :attribute must only contain letters, numbers, dashes and underscores.', - 'alpha_num' => 'The :attribute must only contain letters and numbers.', - 'array' => 'The :attribute must be an array.', - 'before' => 'The :attribute must be a date before :date.', - 'before_or_equal' => 'The :attribute must be a date before or equal to :date.', - 'between' => [ - 'numeric' => 'The :attribute must be between :min and :max.', - 'file' => 'The :attribute must be between :min and :max kilobytes.', - 'string' => 'The :attribute must be between :min and :max characters.', - 'array' => 'The :attribute must have between :min and :max items.', - ], - 'boolean' => 'The :attribute field must be true or false.', - 'confirmed' => 'The :attribute confirmation does not match.', - 'current_password' => 'The password is incorrect.', - 'date' => 'The :attribute is not a valid date.', - 'date_equals' => 'The :attribute must be a date equal to :date.', - 'date_format' => 'The :attribute does not match the format :format.', - 'declined' => 'The :attribute must be declined.', - 'declined_if' => 'The :attribute must be declined when :other is :value.', - 'different' => 'The :attribute and :other must be different.', - 'digits' => 'The :attribute must be :digits digits.', - 'digits_between' => 'The :attribute must be between :min and :max digits.', - 'dimensions' => 'The :attribute has invalid image dimensions.', - 'distinct' => 'The :attribute field has a duplicate value.', - 'email' => 'The :attribute must be a valid email address.', - 'ends_with' => 'The :attribute must end with one of the following: :values.', - 'enum' => 'The selected :attribute is invalid.', - 'exists' => 'The selected :attribute is invalid.', - 'file' => 'The :attribute must be a file.', - 'filled' => 'The :attribute field must have a value.', - 'gt' => [ - 'numeric' => 'The :attribute must be greater than :value.', - 'file' => 'The :attribute must be greater than :value kilobytes.', - 'string' => 'The :attribute must be greater than :value characters.', - 'array' => 'The :attribute must have more than :value items.', - ], - 'gte' => [ - 'numeric' => 'The :attribute must be greater than or equal to :value.', - 'file' => 'The :attribute must be greater than or equal to :value kilobytes.', - 'string' => 'The :attribute must be greater than or equal to :value characters.', - 'array' => 'The :attribute must have :value items or more.', - ], - 'image' => 'The :attribute must be an image.', - 'in' => 'The selected :attribute is invalid.', - 'in_array' => 'The :attribute field does not exist in :other.', - 'integer' => 'The :attribute must be an integer.', - 'ip' => 'The :attribute must be a valid IP address.', - 'ipv4' => 'The :attribute must be a valid IPv4 address.', - 'ipv6' => 'The :attribute must be a valid IPv6 address.', - 'json' => 'The :attribute must be a valid JSON string.', - 'lt' => [ - 'numeric' => 'The :attribute must be less than :value.', - 'file' => 'The :attribute must be less than :value kilobytes.', - 'string' => 'The :attribute must be less than :value characters.', - 'array' => 'The :attribute must have less than :value items.', - ], - 'lte' => [ - 'numeric' => 'The :attribute must be less than or equal to :value.', - 'file' => 'The :attribute must be less than or equal to :value kilobytes.', - 'string' => 'The :attribute must be less than or equal to :value characters.', - 'array' => 'The :attribute must not have more than :value items.', - ], - 'mac_address' => 'The :attribute must be a valid MAC address.', - 'max' => [ - 'numeric' => 'The :attribute must not be greater than :max.', - 'file' => 'The :attribute must not be greater than :max kilobytes.', - 'string' => 'The :attribute must not be greater than :max characters.', - 'array' => 'The :attribute must not have more than :max items.', - ], - 'mimes' => 'The :attribute must be a file of type: :values.', - 'mimetypes' => 'The :attribute must be a file of type: :values.', - 'min' => [ - 'numeric' => 'The :attribute must be at least :min.', - 'file' => 'The :attribute must be at least :min kilobytes.', - 'string' => 'The :attribute must be at least :min characters.', - 'array' => 'The :attribute must have at least :min items.', - ], - 'multiple_of' => 'The :attribute must be a multiple of :value.', - 'not_in' => 'The selected :attribute is invalid.', - 'not_regex' => 'The :attribute format is invalid.', - 'numeric' => 'The :attribute must be a number.', - 'password' => 'The password is incorrect.', - 'present' => 'The :attribute field must be present.', - 'prohibited' => 'The :attribute field is prohibited.', - 'prohibited_if' => 'The :attribute field is prohibited when :other is :value.', - 'prohibited_unless' => 'The :attribute field is prohibited unless :other is in :values.', - 'prohibits' => 'The :attribute field prohibits :other from being present.', - 'regex' => 'The :attribute format is invalid.', - 'required' => 'The :attribute field is required.', - 'required_array_keys' => 'The :attribute field must contain entries for: :values.', - 'required_if' => 'The :attribute field is required when :other is :value.', - 'required_unless' => 'The :attribute field is required unless :other is in :values.', - 'required_with' => 'The :attribute field is required when :values is present.', - 'required_with_all' => 'The :attribute field is required when :values are present.', - 'required_without' => 'The :attribute field is required when :values is not present.', - 'required_without_all' => 'The :attribute field is required when none of :values are present.', - 'same' => 'The :attribute and :other must match.', - 'size' => [ - 'numeric' => 'The :attribute must be :size.', - 'file' => 'The :attribute must be :size kilobytes.', - 'string' => 'The :attribute must be :size characters.', - 'array' => 'The :attribute must contain :size items.', - ], - 'starts_with' => 'The :attribute must start with one of the following: :values.', - 'string' => 'The :attribute must be a string.', - 'timezone' => 'The :attribute must be a valid timezone.', - 'unique' => 'The :attribute has already been taken.', - 'uploaded' => 'The :attribute failed to upload.', - 'url' => 'The :attribute must be a valid URL.', - 'uuid' => 'The :attribute must be a valid UUID.', - - /* - |-------------------------------------------------------------------------- - | Custom Validation Language Lines - |-------------------------------------------------------------------------- - | - | Here you may specify custom validation messages for attributes using the - | convention "attribute.rule" to name the lines. This makes it quick to - | specify a specific custom language line for a given attribute rule. - | - */ - - 'custom' => [ - 'attribute-name' => [ - 'rule-name' => 'custom-message', - ], - ], - - /* - |-------------------------------------------------------------------------- - | Custom Validation Attributes - |-------------------------------------------------------------------------- - | - | The following language lines are used to swap our attribute placeholder - | with something more reader friendly such as "E-Mail Address" instead - | of "email". This simply helps us make our message more expressive. - | - */ - - 'attributes' => [], - -]; diff --git a/appsec/tests/integration/src/test/www/laravel8x/resources/views/welcome.blade.php b/appsec/tests/integration/src/test/www/laravel8x/resources/views/welcome.blade.php deleted file mode 100644 index dd6a45db766..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/resources/views/welcome.blade.php +++ /dev/null @@ -1,132 +0,0 @@ - - - - - - - Laravel - - - - - - - - - - -
- @if (Route::has('login')) - - @endif - -
-
- - - - - -
- -
-
-
-
- -
Documentation
-
- -
-
- Laravel has wonderful, thorough documentation covering every aspect of the framework. Whether you are new to the framework or have previous experience with Laravel, we recommend reading all of the documentation from beginning to end. -
-
-
- -
-
- -
Laracasts
-
- -
-
- Laracasts offers thousands of video tutorials on Laravel, PHP, and JavaScript development. Check them out, see for yourself, and massively level up your development skills in the process. -
-
-
- -
-
- -
Laravel News
-
- -
-
- Laravel News is a community driven portal and newsletter aggregating all of the latest and most important news in the Laravel ecosystem, including new package releases and tutorials. -
-
-
- -
-
- -
Vibrant Ecosystem
-
- -
-
- Laravel's robust library of first-party tools and libraries, such as Forge, Vapor, Nova, and Envoyer help you take your projects to the next level. Pair them with powerful open source libraries like Cashier, Dusk, Echo, Horizon, Sanctum, Telescope, and more. -
-
-
-
-
- -
-
-
- - - - - - Shop - - - - - - - - Sponsor - -
-
- -
- Laravel v{{ Illuminate\Foundation\Application::VERSION }} (PHP v{{ PHP_VERSION }}) -
-
-
-
- - diff --git a/appsec/tests/integration/src/test/www/laravel8x/routes/api.php b/appsec/tests/integration/src/test/www/laravel8x/routes/api.php deleted file mode 100644 index eb6fa48c25d..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/routes/api.php +++ /dev/null @@ -1,19 +0,0 @@ -get('/user', function (Request $request) { - return $request->user(); -}); diff --git a/appsec/tests/integration/src/test/www/laravel8x/routes/channels.php b/appsec/tests/integration/src/test/www/laravel8x/routes/channels.php deleted file mode 100644 index 5d451e1fae8..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/routes/channels.php +++ /dev/null @@ -1,18 +0,0 @@ -id === (int) $id; -}); diff --git a/appsec/tests/integration/src/test/www/laravel8x/routes/console.php b/appsec/tests/integration/src/test/www/laravel8x/routes/console.php deleted file mode 100644 index e05f4c9a1b2..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/routes/console.php +++ /dev/null @@ -1,19 +0,0 @@ -comment(Inspiring::quote()); -})->purpose('Display an inspiring quote'); diff --git a/appsec/tests/integration/src/test/www/laravel8x/routes/web.php b/appsec/tests/integration/src/test/www/laravel8x/routes/web.php deleted file mode 100644 index 916325368c4..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/routes/web.php +++ /dev/null @@ -1,23 +0,0 @@ - - */ - -$uri = urldecode( - parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH) ?? '' -); - -// This file allows us to emulate Apache's "mod_rewrite" functionality from the -// built-in PHP web server. This provides a convenient way to test a Laravel -// application without having installed a "real" web server software here. -if ($uri !== '/' && file_exists(__DIR__.'/public'.$uri)) { - return false; -} - -require_once __DIR__.'/public/index.php'; diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/app/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/app/.gitignore deleted file mode 100644 index ea2338ad8c2..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/app/.gitignore +++ /dev/null @@ -1,3 +0,0 @@ -public -!public/ -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/app/public/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/app/public/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/app/public/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/framework/.gitignore deleted file mode 100644 index 05c4471f2b5..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/.gitignore +++ /dev/null @@ -1,9 +0,0 @@ -compiled.php -config.php -down -events.scanned.php -maintenance.php -routes.php -routes.scanned.php -schedule-* -services.json diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/.gitignore deleted file mode 100644 index 08b0ba6048c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/.gitignore +++ /dev/null @@ -1,3 +0,0 @@ -data -!data/ -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/data/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/data/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/cache/data/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/sessions/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/framework/sessions/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/sessions/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/testing/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/framework/testing/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/testing/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/views/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/framework/views/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/framework/views/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/storage/logs/.gitignore b/appsec/tests/integration/src/test/www/laravel8x/storage/logs/.gitignore deleted file mode 100644 index c1aefd2012c..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/storage/logs/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -.gitignore -!.gitignore diff --git a/appsec/tests/integration/src/test/www/laravel8x/tests/CreatesApplication.php b/appsec/tests/integration/src/test/www/laravel8x/tests/CreatesApplication.php deleted file mode 100644 index 547152f6a93..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/tests/CreatesApplication.php +++ /dev/null @@ -1,22 +0,0 @@ -make(Kernel::class)->bootstrap(); - - return $app; - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/tests/Feature/ExampleTest.php b/appsec/tests/integration/src/test/www/laravel8x/tests/Feature/ExampleTest.php deleted file mode 100644 index 4ae02bc5172..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/tests/Feature/ExampleTest.php +++ /dev/null @@ -1,21 +0,0 @@ -get('/'); - - $response->assertStatus(200); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/tests/TestCase.php b/appsec/tests/integration/src/test/www/laravel8x/tests/TestCase.php deleted file mode 100644 index 2932d4a69d6..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/tests/TestCase.php +++ /dev/null @@ -1,10 +0,0 @@ -assertTrue(true); - } -} diff --git a/appsec/tests/integration/src/test/www/laravel8x/webpack.mix.js b/appsec/tests/integration/src/test/www/laravel8x/webpack.mix.js deleted file mode 100644 index 2a22dc1206a..00000000000 --- a/appsec/tests/integration/src/test/www/laravel8x/webpack.mix.js +++ /dev/null @@ -1,17 +0,0 @@ -const mix = require('laravel-mix'); - -/* - |-------------------------------------------------------------------------- - | Mix Asset Management - |-------------------------------------------------------------------------- - | - | Mix provides a clean, fluent API for defining some Webpack build steps - | for your Laravel applications. By default, we are compiling the CSS - | file for the application as well as bundling up all the JS files. - | - */ - -mix.js('resources/js/app.js', 'public/js') - .postCss('resources/css/app.css', 'public/css', [ - // - ]); diff --git a/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php b/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php index b5361660bff..9dd5bcf8508 100644 --- a/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php +++ b/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php @@ -3,6 +3,7 @@ namespace App\Http\Controllers; use Illuminate\Http\Request; +use Illuminate\Http\Response; use Illuminate\Support\Facades\Auth; use Illuminate\Auth\Events\Registered; use Illuminate\Support\Facades\Hash; @@ -51,6 +52,42 @@ public function register(Request $request): RedirectResponse return redirect(RouteServiceProvider::HOME); } + public function authenticate(Request $request): Response + { + $credentials = [ + 'email' => $request->get('email'), + 'password' => $request->query('password', 'password'), + ]; + + if (Auth::attempt($credentials)) { + $request->session()->regenerate(); + return response('Login successful', 200); + } + + return response('Invalid credentials', 403); + } + + public function registerAppsec(Request $request): Response + { + $request->validate([ + 'name' => ['required'], + 'email' => ['required'], + 'password' => ['required'], + ]); + + $user = User::create([ + 'name' => $request->name, + 'email' => $request->email, + 'password' => Hash::make($request->password), + ]); + + event(new Registered($user)); + + Auth::login($user); + + return response('User created', 200); + } + public function behind_auth() { return "page behind auth"; diff --git a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/MiscController.php b/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/MiscController.php similarity index 73% rename from appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/MiscController.php rename to tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/MiscController.php index 8dd1831efa9..4c5e3e7fbb7 100644 --- a/appsec/tests/integration/src/test/www/laravel8x/app/Http/Controllers/MiscController.php +++ b/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/MiscController.php @@ -6,7 +6,7 @@ class MiscController extends Controller { - public function dynamicPath(string $param01) + public function dynamicPath(string $param01): Response { return response('Hi', 200); } diff --git a/tests/Frameworks/Laravel/Version_8_x/database/seeders/DatabaseSeeder.php b/tests/Frameworks/Laravel/Version_8_x/database/seeders/DatabaseSeeder.php index 57b73b54da1..bf59abe22ad 100644 --- a/tests/Frameworks/Laravel/Version_8_x/database/seeders/DatabaseSeeder.php +++ b/tests/Frameworks/Laravel/Version_8_x/database/seeders/DatabaseSeeder.php @@ -3,16 +3,17 @@ namespace Database\Seeders; use Illuminate\Database\Seeder; +use Illuminate\Support\Facades\DB; +use Illuminate\Support\Facades\Hash; class DatabaseSeeder extends Seeder { - /** - * Seed the application's database. - * - * @return void - */ public function run() { - // \App\Models\User::factory(10)->create(); + DB::table('users')->insert([ + 'name' => 'ciuser', + 'email' => 'ciuser@example.com', + 'password' => Hash::make('password'), + ]); } } diff --git a/tests/Frameworks/Laravel/Version_8_x/initialize.sh b/tests/Frameworks/Laravel/Version_8_x/initialize.sh new file mode 100755 index 00000000000..c16580b843e --- /dev/null +++ b/tests/Frameworks/Laravel/Version_8_x/initialize.sh @@ -0,0 +1,34 @@ +#!/bin/bash -ex + +cd /var/www + +export DD_TRACE_CLI_ENABLED=false + +# Clear stale bootstrap cache built with dev dependencies (e.g. facade/ignition). +# Without this, artisan fails with "Class not found" for removed dev providers. +rm -f /var/www/bootstrap/cache/*.php + +# The vendor/ directory is pre-installed on the host and mounted via the overlay. +# Run composer install to regenerate the autoloader for the container's PHP version. +composer install --no-dev --no-scripts + +cp .env.example .env +# Patch the environment to use SQLite instead of MySQL. +sed -i 's/^DB_CONNECTION=.*/DB_CONNECTION=sqlite/' .env +sed -i 's/^DB_DATABASE=.*/DB_DATABASE=\/tmp\/database.sqlite/' .env +sed -i '/^DB_HOST=/d' .env +sed -i '/^DB_PORT=/d' .env +sed -i '/^DB_USERNAME=/d' .env +sed -i '/^DB_PASSWORD=/d' .env +touch /tmp/database.sqlite + +php artisan package:discover --ansi +php artisan key:generate +php artisan config:cache +php artisan migrate +php artisan db:seed + +chown www-data.www-data /tmp/database.sqlite +chown -R www-data.www-data /var/www/storage +mkdir -p /tmp/logs/laravel +chown www-data.www-data /tmp/logs/laravel diff --git a/tests/Frameworks/Laravel/Version_8_x/public/outside_of_framework.php b/tests/Frameworks/Laravel/Version_8_x/public/outside_of_framework.php new file mode 100644 index 00000000000..86ef73a115b --- /dev/null +++ b/tests/Frameworks/Laravel/Version_8_x/public/outside_of_framework.php @@ -0,0 +1,4 @@ +name('simple_route'); Route::get('simple_view', [CommonSpecsController::class, 'simple_view']); Route::get('dynamic_route/{param01}/static/{param02?}', [CommonSpecsController::class, 'dynamicRoute']); From 7615537dc155248aa87bcc1ff42b30923fe9c791 Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Mon, 31 Aug 2026 12:22:11 +0200 Subject: [PATCH 2/3] Unify login mehtods --- .../php/integration/Laravel8xTests.groovy | 17 ++++---- .../Http/Controllers/LoginTestController.php | 40 +------------------ .../Laravel/Version_8_x/routes/web.php | 2 - 3 files changed, 9 insertions(+), 50 deletions(-) diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy index 6d959d40f69..16e182d17cd 100644 --- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy +++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy @@ -49,7 +49,7 @@ class Laravel8xTests { @Test @Order(4) void 'Login failure automated event'() { - Trace trace = container.traceFromRequest('/authenticate?email=nonExisiting@email.com') { + Trace trace = container.traceFromRequest('/login/auth?email=nonExisiting@email.com') { HttpResponse resp -> assert resp.statusCode() == 403 } @@ -58,7 +58,6 @@ class Laravel8xTests { assert span.meta."appsec.events.users.login.failure.track" == "true" assert span.meta."_dd.appsec.events.users.login.failure.auto.mode" == "identification" assert span.meta."appsec.events.users.login.failure.usr.exists" == "false" - // Failed event hook reads the credentials array; usr.login is the attempted email. assert span.meta."appsec.events.users.login.failure.usr.login" == 'nonExisiting@email.com' assert span.metrics._sampling_priority_v1 == 2.0d } @@ -68,7 +67,7 @@ class Laravel8xTests { void 'Login failure automated event - wrong password for existing user'() { // Existing user (id=1) with a wrong password: the Failed event carries the // resolved user object, so usr.id and usr.exists must be populated. - Trace trace = container.traceFromRequest('/authenticate?email=ciuser@example.com&password=wrong') { + Trace trace = container.traceFromRequest('/login/auth?email=ciuser@example.com&password=wrong') { HttpResponse resp -> assert resp.statusCode() == 403 } @@ -89,7 +88,7 @@ class Laravel8xTests { // Laravel integration calls track_user_login_failure_event_automated('', // null, false, [], 'laravel'). Per spec both missing_user_login and // missing_user_id must fire, tagged framework:laravel. - container.traceFromRequest('/authenticate?email=') { + container.traceFromRequest('/login/auth?email=') { HttpResponse resp -> assert resp.statusCode() == 403 } @@ -125,7 +124,7 @@ class Laravel8xTests { @Order(7) void 'Login success automated event'() { //The user ciuser@example.com is already on the DB - def trace = container.traceFromRequest('/authenticate?email=ciuser@example.com') { + def trace = container.traceFromRequest('/login/auth?email=ciuser@example.com') { HttpResponse resp -> assert resp.statusCode() == 200 } @@ -142,7 +141,7 @@ class Laravel8xTests { @Order(8) void 'Sign up automated event'() { def trace = container.traceFromRequest( - '/register?email=test-user-new@email.coms&name=somename&password=somepassword' + '/login/signup?email=test-user-new@email.coms&name=somename&password=somepassword' ) { HttpResponse resp -> assert resp.statusCode() == 200 } @@ -209,10 +208,10 @@ class Laravel8xTests { endpoints.size() > 0 }) - assert endpoints.size() == 29 + assert endpoints.size() == 27 assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null - assert endpoints.find { it.path == 'authenticate' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET authenticate' } != null - assert endpoints.find { it.path == 'register' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET register' } != null + assert endpoints.find { it.path == 'login/auth' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET login/auth' } != null + assert endpoints.find { it.path == 'login/signup' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET login/signup' } != null assert endpoints.find { it.path == 'dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET dynamic-path/{param01}' } != null assert endpoints.find { it.path == 'api/user' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET api/user' } != null } diff --git a/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php b/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php index 9dd5bcf8508..f04efa20d55 100644 --- a/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php +++ b/tests/Frameworks/Laravel/Version_8_x/app/Http/Controllers/LoginTestController.php @@ -7,8 +7,6 @@ use Illuminate\Support\Facades\Auth; use Illuminate\Auth\Events\Registered; use Illuminate\Support\Facades\Hash; -use Illuminate\Http\RedirectResponse; -use App\Providers\RouteServiceProvider; use App\Models\User; class LoginTestController extends Controller @@ -18,41 +16,6 @@ class LoginTestController extends Controller * @return \Illuminate\Http\Response */ public function auth(Request $request) - { - $credentials = [ - 'email' => $request->get('email'), - 'password' => 'password', - ]; - - if (Auth::attempt($credentials)) { - return response('Login successful', 200); - } - - return response('Invalid credentials', 403); - } - - public function register(Request $request): RedirectResponse - { - $request->validate([ - 'name' => ['required'], - 'email' => ['required'], - 'password' => ['required'], - ]); - - $user = User::create([ - 'name' => $request->name, - 'email' => $request->email, - 'password' => Hash::make($request->password), - ]); - - event(new Registered($user)); - - Auth::login($user); - - return redirect(RouteServiceProvider::HOME); - } - - public function authenticate(Request $request): Response { $credentials = [ 'email' => $request->get('email'), @@ -60,14 +23,13 @@ public function authenticate(Request $request): Response ]; if (Auth::attempt($credentials)) { - $request->session()->regenerate(); return response('Login successful', 200); } return response('Invalid credentials', 403); } - public function registerAppsec(Request $request): Response + public function register(Request $request): Response { $request->validate([ 'name' => ['required'], diff --git a/tests/Frameworks/Laravel/Version_8_x/routes/web.php b/tests/Frameworks/Laravel/Version_8_x/routes/web.php index dcf6a818bd7..3a9ccc2ebfc 100644 --- a/tests/Frameworks/Laravel/Version_8_x/routes/web.php +++ b/tests/Frameworks/Laravel/Version_8_x/routes/web.php @@ -24,8 +24,6 @@ Route::get('/', function () { return view('welcome'); }); -Route::get('/authenticate', [LoginTestController::class, 'authenticate']); -Route::get('/register', [LoginTestController::class, 'registerAppsec']); Route::get('/dynamic-path/{param01}', [MiscController::class, 'dynamicPath']); Route::get('simple', [CommonSpecsController::class, 'simple'])->name('simple_route'); From 5f52e5f23c1c9b8b17749257b03821ed2182ff66 Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Mon, 31 Aug 2026 17:35:01 +0200 Subject: [PATCH 3/3] Create docker init file --- .../com/datadog/appsec/php/docker/AppSecContainer.groovy | 4 +++- .../Laravel/Version_8_x/{initialize.sh => docker-init.sh} | 8 +++----- 2 files changed, 6 insertions(+), 6 deletions(-) rename tests/Frameworks/Laravel/Version_8_x/{initialize.sh => docker-init.sh} (70%) diff --git a/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy b/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy index d0907e3afc5..1cd2f7bc8a1 100644 --- a/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy +++ b/appsec/tests/integration/src/main/groovy/com/datadog/appsec/php/docker/AppSecContainer.groovy @@ -646,7 +646,9 @@ class AppSecContainer> extends GenericContain private void runInitialize() { execInContainerWithOutput('/bin/bash', '-c', ''' - if [[ -f /var/www/initialize.sh ]]; then + if [[ -f /var/www/docker-init.sh ]]; then + /var/www/docker-init.sh + elif [[ -f /var/www/initialize.sh ]]; then /var/www/initialize.sh fi ''') diff --git a/tests/Frameworks/Laravel/Version_8_x/initialize.sh b/tests/Frameworks/Laravel/Version_8_x/docker-init.sh similarity index 70% rename from tests/Frameworks/Laravel/Version_8_x/initialize.sh rename to tests/Frameworks/Laravel/Version_8_x/docker-init.sh index c16580b843e..06c559bc032 100755 --- a/tests/Frameworks/Laravel/Version_8_x/initialize.sh +++ b/tests/Frameworks/Laravel/Version_8_x/docker-init.sh @@ -4,12 +4,10 @@ cd /var/www export DD_TRACE_CLI_ENABLED=false -# Clear stale bootstrap cache built with dev dependencies (e.g. facade/ignition). -# Without this, artisan fails with "Class not found" for removed dev providers. +# vendor/ arrives via overlayfs from the local checkout. Re-run composer to +# strip dev packages and rebuild the autoloader for the container's PHP version. +# Clear bootstrap cache first or artisan fails on dev-only providers (e.g. facade/ignition). rm -f /var/www/bootstrap/cache/*.php - -# The vendor/ directory is pre-installed on the host and mounted via the overlay. -# Run composer install to regenerate the autoloader for the container's PHP version. composer install --no-dev --no-scripts cp .env.example .env