All verified sample improvements

Vite Manifest Not Found: Four Different Causes

When Vite manifest not found appears right after a deploy, the answer you find is almost always "run npm run build". Measuring six cases in Docker shows that the build fixes one of the four causes, and that two of them never produce an err…

Laravel · 2026-08-02 GitHub

Security Hardened

Inertia Needs No Patch for a Nonce-Based CSP

Try to drop 'unsafe-inline' from the Content-Security-Policy of a Laravel + Inertia app and you'll usually land on some version of: "Inertia embeds the initial props in an inline script, so you can't — you'd have to patch Inertia or Handle…

Laravel · 2026-07-23 GitHub

Production Ready

We Actually Ran the Laravel 12 to 13 Upgrade

There is no shortage of Laravel 13 upgrade guides. The problem is that most of the warnings in them were written without running the upgrade.

Laravel · 2026-07-23 GitHub

Production Ready

Laravel's 419 Page Expired Can Be Diagnosed

Search for how to fix 419 Page Expired and you get the same list every time. Check @csrf. Check the session driver. Run php artisan config:clear. Check APP_KEY.

Laravel · 2026-07-23 GitHub

Security Hardened

Implementing Content-Security-Policy in Laravel

Content-Security-Policy (CSP) is the last defense layer that stops XSS damage in the browser. The server declares "these are the only scripts allowed to run and resources allowed to load on this page," and the browser rejects everything el…

2026-04-19

Security Hardened

Laravel + Livewire Starter Kit: nonce-based CSP

The SetSecurityHeaders middleware shipped in our Livewire Starter Kit Docker-verified fork kept 'unsafe-inline' in script-src and style-src. That was a deliberate placeholder to match the React/Vue forks; the Livewire architecture doesn't …

Laravel · 2026-04-19 GitHub

Security Hardened

Hardening the Livewire Starter Kit

We took the official laravel/livewire-starter-kit (Livewire v4 + Flux + Alpine), ran it inside Docker, and published a production-hardened fork. Tests go from the upstream 33 passed to 37 passed / 92 assertions — re-run in Docker on 2026-0…

Laravel · 2026-04-19 GitHub

Production Ready

Hardening the Inertia Starter Kits

We ran laravel/react-starter-kit and laravel/vue-starter-kit in Docker and published two forks rewritten to survive production. Tests went from 40 passed to 44 passed / 151 assertions in both.

Laravel · 2026-04-19 GitHub

Security Hardened

Hardening the shared Laravel starter-kit backend

Laravel's official starter kits (React / Vue / Livewire) differ in their frontend layer, but they share the same Laravel + Fortify backend code. So most of the production-hardening work is identical across all three. This is the pillar art…

Laravel · 2026-04-18