Weave Code
Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message
Log in Register
Rules
voodflow/vmedia
Security
Security
voodflow/vmedia
cursor
security
uploads
mime-validation
path-traversal
auth
media-routes
throttle

Vmedia upload and API security

Install
php artisan boost:add-skill voodflow/vmedia

Save this content to: .cursor/rules/security.mdc

# Security

- All media HTTP routes require authentication (+ throttle); optional `VMEDIA_ABILITY`.
- Uploads: allow-listed MIME only; reject `../` in client filenames; sanitize relative paths (`UploadGuard`).
- Delete/open only vault-owned image/video collections.
- Do not serve private disks as public URLs without intentional visibility.
- Companion builder aliases must keep the same auth middleware as `vmedia.*` routes.

Security

  • All media HTTP routes require authentication (+ throttle); optional VMEDIA_ABILITY.
  • Uploads: allow-listed MIME only; reject ../ in client filenames; sanitize relative paths (UploadGuard).
  • Delete/open only vault-owned image/video collections.
  • Do not serve private disks as public URLs without intentional visibility.
  • Companion builder aliases must keep the same auth middleware as vmedia.* routes.
Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
users-au/socialite-provider
twidpay/twid-logger
mrnewport/laravel-plaid
mrnewport/laravel-repo
mrnewport/laravel-docsign
mrnewport/laravel-stow
mrnewport/laravel-flow
mrnewport/laravel-priceable
mrnewport/laravel-nestedterms
fredmeng/laravel-apidoc-generator
itstructure/laravel-multilingual-tools
pdustdar/elasticsearch
markupai/php-sdk
rlacerda83/lumem-microservice-shipment
uni-method/symfony-lib
tacticmedia/scim-server-bundle
neika-ai/symfony-bundle
mattleads/agent-publishing-bundle
glavweb/framework-bundle
glavweb/extra-bundle