wip

Author: andreiio

app/Filament/Resources/Profiles/Concerns/ResolvesRecord.php

@@ -14,6 +14,10 @@ public function mount($record = null): void
             $this->authorizeAccess();
         }
 
-        $this->callHook('beforeFill');
+        if (! method_exists($this, 'hasInfolist') || ! $this->hasInfolist()) {
+            $this->fillForm();
+        } else {
+            $this->callHook('beforeFill');
+        }
     }
 }

app/Http/Middleware/EnsureUserIsActive.php

@@ -5,6 +5,7 @@
 namespace App\Http\Middleware;
 
 use Closure;
+use Filament\Facades\Filament;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
 use Symfony\Component\HttpFoundation\Response;
@@ -27,7 +28,7 @@ public function handle(Request $request, Closure $next): Response
         $request->session()->invalidate();
         $request->session()->regenerateToken();
 
-        return redirect()->route('filament.auth.login')
+        return redirect()->to(Filament::getLoginUrl())
             ->with('error', __('user.inactive_error'));
     }
 }

app/Providers/Filament/AdminPanelProvider.php

@@ -11,6 +11,9 @@
 use App\Filament\Resources\Beneficiaries\BeneficiaryResource;
 use App\Filament\Resources\Profiles\ProfileResource;
 use App\Filament\Resources\Vacations\VacationResource;
+use App\Http\Middleware\EnsureUserHasCompletedProfile;
+use App\Http\Middleware\EnsureUserIsActive;
+use App\Http\Middleware\FixMissingPasswordSetAtAttribute;
 use App\Models\User;
 use Filament\Actions\Action;
 use Filament\Http\Middleware\Authenticate;
@@ -114,6 +117,9 @@ public function panel(Panel $panel): Panel
             })
             ->authMiddleware([
                 Authenticate::class,
+                EnsureUserIsActive::class,
+                EnsureUserHasCompletedProfile::class,
+                FixMissingPasswordSetAtAttribute::class,
             ]);
     }
 

tests/Unit/ExampleTest.php

@@ -0,0 +1,14 @@
+<?php
+
+declare(strict_types=1);
+
+use App\Services\Sanitize;
+
+it('sanitizes urls', function () {
+    $this->assertSame('http://www.example.com', Sanitize::url('www.example.com'));
+    $this->assertSame('https://example.com', Sanitize::url('https://example.com'));
+    $this->assertSame('https://example.com/path/to/resource', Sanitize::url('https://example.com/path/to/resource'));
+    $this->assertSame('https://example.com/path/to/resource', Sanitize::url('  https://example.com/path/to/resource  '));
+    $this->assertSame('https://example.com/path/to/resourcealert("xss")', Sanitize::url('https://example.com/path/to/resource<script>alert("xss")</script>'));
+    $this->assertSame('https://example.com/path/to/resource?param=alert("xss")', Sanitize::url('https://example.com/path/to/resource?param=<script>alert("xss")</script>'));
+});