Fail on Unknown Fields

4 videos across 3 channels

Laravel’s strict form-request mode rejects unknown fields to prevent mass-injection vulnerabilities, a feature fleshed out across 13.4 and 13.5 with options for global or per-request application and practical cautions about CSRF and potential pitfalls. The coverage highlights real-world security benefits, how to opt in or out, and developer trade-offs, including testing nuances and how tools like Pest interact with the feature.

huge stuff: laravel got strict forms, pest flaky tests + more thumbnail

huge stuff: laravel got strict forms, pest flaky tests + more

The video reviews two new Laravel related releases from Past PHP, highlighting flaky testing improvements, strict form r

00:05:01
NEW in Laravel 13.5: Strict Mode for Form Requests thumbnail

NEW in Laravel 13.5: Strict Mode for Form Requests

The video explains Laravel 13.5's form request strict mode, highlighting its benefits for preventing unknown fields from

00:06:48
🔴 Pest v4.5, Laravel Strict Forms, Inspect Queue Jobs, And More thumbnail

🔴 Pest v4.5, Laravel Strict Forms, Inspect Queue Jobs, And More

The host recaps new Laravel and Past PHP features, demonstrates flaky tests and form request strict mode, and shares exp

01:36:48