23804883405

Committed 31 Mar 2026 03:14PM UTC coverage: 11.195% (+1.8%) from 9.347%

Build Type

push

github

Committed by Martian Congress

Commit Message

refactor: Tier 1 — security fixes, route standardization, code style, docs

S9:  File upload path traversal — assert realpath() within allowed dirs,
     sanitize citizen address in file paths
S11: Citizen registry queries capped with LIMIT 100
S12: External HTTP calls — replaced file_get_contents with Http::timeout()
     in CongressController, Wallet/ApiController, AppHelper
A8:  All routes converted to Laravel 9+ array notation
     [Controller::class, 'method']
D2:  Created DEVELOPMENT.md — complete setup guide for contributors
D4:  Laravel Pint code style enforced across 211 files

Tests updated: public route assertions corrected after route syntax
standardization exposed that old string-notation routes never resolved
properly in tests.

127 tests, 251 assertions, 0 PHPStan errors.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

302 of 3262 new or added lines in 58 files covered. (9.26%)

139 existing lines in 24 files now uncovered.

620 of 5538 relevant lines covered (11.2%)

1.54 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/app/Http/Requests/AmendProposalRequest.php

<?php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class AmendProposalRequest extends FormRequest
{
    /**
     * Determine if the user is authorized to make this request.
     */
    public function authorize(): bool
    {
        return auth()->check();
    }

    /**
     * Get the validation rules that apply to the request.
     */
    public function rules(): array
    {
        return [
            'proposalId' => 'required|integer',
            'title' => 'required|string|max:500',
            'description' => 'required|string|max:50000',
            'note' => 'nullable|string|max:1000',
        ];
    }
}

1	<?php
2
3	namespace App\Http\Requests;
4
5	use Illuminate\Foundation\Http\FormRequest;
6
7	class AmendProposalRequest extends FormRequest
8	{
9	/**
10	* Determine if the user is authorized to make this request.
11	*/
12	public function authorize(): bool	×
13	{
14	return auth()->check();	×
15	}
16
17	/**
18	* Get the validation rules that apply to the request.
19	*/
20	public function rules(): array	×
21	{
22	return [	×
NEW 23	'proposalId' => 'required\|integer',	×
NEW 24	'title' => 'required\|string\|max:500',	×
25	'description' => 'required\|string\|max:50000',	×
NEW 26	'note' => 'nullable\|string\|max:1000',	×
27	];	×
28	}
29	}

marscoin / martianrepublic / 23804883405

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous