WEBDIENSTE/ECC
1
0
Fork 0
mirror of https://github.com/affaan-m/ECC.git synced 2026-10-15 20:55:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'refs/remotes/pr/3269' into maint/stewardship-batch-2026-09-30

Browse Source 
# Conflicts:
#	manifests/context-packs/skill-triggers@1.json
This commit is contained in:
haelyra
2026-09-30 13:21:12 -04:00
parent 7c03203dd8 eb30409fc5
commit 4993147de5
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pi/core/skills/laravel-security/SKILL.md
+5 -5
View File
@@ -779,13 +779,13 @@ $path = $request->file('document')->store('documents', 'local');
// Use signed URLs for temporary file access
use Illuminate\Support\Facades\Storage;
public function download(Request $request, string $path)
public function download(Document $document)
{
// Generate temporary signed URL (expires in 15 minutes)
$url = Storage::temporaryUrl($path, now()->addMinutes(15));
// Authorize against the model that owns the file, never a path taken from the request
$this->authorize('download', $document);
// Validate user has permission
$this->authorize('download', $path);
// Generate the temporary signed URL (expires in 15 minutes) only after authorization
$url = Storage::disk('s3')->temporaryUrl($document->path, now()->addMinutes(15));
return redirect($url);
}
skills/laravel-security/SKILL.md
+5 -5
View File
@@ -779,13 +779,13 @@ $path = $request->file('document')->store('documents', 'local');
// Use signed URLs for temporary file access
use Illuminate\Support\Facades\Storage;
public function download(Request $request, string $path)
public function download(Document $document)
{
// Generate temporary signed URL (expires in 15 minutes)
$url = Storage::temporaryUrl($path, now()->addMinutes(15));
// Authorize against the model that owns the file, never a path taken from the request
$this->authorize('download', $document);
// Validate user has permission
$this->authorize('download', $path);
// Generate the temporary signed URL (expires in 15 minutes) only after authorization
$url = Storage::disk('s3')->temporaryUrl($document->path, now()->addMinutes(15));
return redirect($url);
}