Laravel pagination security

[yasseraugustus]

Do I need to validate the pagination parameters (page, perPage..)??

• while writing some code with Laravel api I searched if there is any validation via Laravel code but it does not exists!! so do I need to take care of it?

public function index(PaginationRequest $request){
       ....
}

[AlexWinder]

There is validation on the page value:

framework/src/Illuminate/Pagination/Paginator.php

Line 58 in 78eb4da

return $this->isValidPageNumber($currentPage) ? (int) $currentPage : 1;

With regards to the perPage this is set based on your code and so you would validate your own values to send into the paginator.

https://laravel.com/docs/9.x/pagination#paginating-eloquent-results