bổ sung đủ 57 trường hợp test

2026-04-08 08:36:52 +07:00
parent c026e4cc2c
commit 2fd2c6ddb2
10 changed files with 857 additions and 7 deletions
@@ -17,6 +17,15 @@ class ParameterController extends Controller
    }

    public function update (Request $request) {
+        // Validate image file types before processing to prevent unrestricted file upload (OWASP A05)
+        $request->validate([
+            'logo_image'   => 'nullable|mimes:jpg,png,jpeg,webp,jfif|max:2048',
+            'banner_image' => 'nullable|mimes:jpg,png,jpeg,webp,jfif|max:2048',
+        ], [
+            'logo_image.mimes'   => 'Logo chỉ chấp nhận định dạng jpg, png, jpeg, webp',
+            'banner_image.mimes' => 'Banner chỉ chấp nhận định dạng jpg, png, jpeg, webp',
+        ]);
+
        foreach ($request->except('_token') as $key => $value) {
            $object = Parameter::where('parameter_key', $key)->first();
            if ($object != '') {