Laravel Livewire security check — find browser reachable lines

Finds the lines in your Laravel Livewire and Blade files that the browser can reach, change or call, and names the fix on each one. Runs entirely in your browser — nothing is uploaded.

<?php

namespace App\Livewire\Billing;

use Livewire\Attributes\Url;
use Livewire\Component;
use Livewire\WithFileUploads;
use App\Models\Invoice;

class InvoiceEditor extends Component
{
    use WithFileUploads;

public $invoiceId;
    public int $amountDue = 0;
    public string $status = 'draft';
    public $apiToken;
    public $receipt;

#[Url]
    public $customerId;

public function mount($invoiceId)
    {
        $this->invoiceId = $invoiceId;
        $this->amountDue = Invoice::findOrFail($invoiceId)->amount_due;
    }

public function approve()
    {
        Invoice::find($this->invoiceId)->update($this->only(['amountDue', 'status']));
    }

public function deleteInvoice()
    {
        Invoice::find($this->invoiceId)->delete();
    }

public function saveReceipt()
    {
        $path = $this->receipt->store('receipts');
        Invoice::find($this->invoiceId)->receipt_path = $path;
    }

public function render()
    {
        dump($this->apiToken);

return <<<'blade'
            <div class="invoice">
                {!! $invoiceNotes !!}
                @include($layoutName)
                <input type="number" wire:model.live="amountDue">
                <button wire:click="approve">Approve</button>
            </div>
        blade;
    }
}

as of

Free here: Scan the open Livewire component or Blade file and list every client-reachable line with the fix, free and complete.. In the editor: Scan every PHP and Blade file in the workspace in one run and export a dated Markdown or JSON audit you can hand to a client or fail a CI build on. — that part asks for a licence key.

Same engine as the VS Code extension, byte for byte.