chore: checkpoint before block builder refactor

2026-04-03 23:03:09 +02:00
parent 330950cc6e
commit 4f3fefca5c
14 changed files with 315 additions and 99 deletions
--- a/.cursorrules
+++ b/.cursorrules
@@ -59,7 +59,7 @@ PreRegister is a Laravel 11 application for festival ticket pre-registration. Vi

 ## Security
 - CSRF on all forms
- Rate limiting on public endpoints (`throttle:10,1`)
+- Rate limiting on public endpoints (`config/preregister.php` → `public_requests_per_minute`, applied in `routes/web.php`)
 - Never expose API keys in frontend, logs, or responses
 - Validate and restrict file uploads (image types, max size)
 - UUID slugs prevent URL enumeration