# Security Best Practices (Laravel)

> Proteksi CSRF, pencegahan XSS, SQL injection, mass assignment, keamanan autentikasi, enkripsi, hashing, rate limiting

- 22 pertanyaan wawancara
- Senior
- [Pertanyaan Wawancara: Laravel](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara.md)

## 1. Apa itu proteksi CSRF di Laravel?

**Jawaban**

Proteksi CSRF (Cross-Site Request Forgery) mencegah serangan permintaan lintas situs dengan memvalidasi token unik untuk setiap sesi. Laravel secara otomatis menghasilkan token ini dan memverifikasinya pada semua permintaan POST, PUT, PATCH, DELETE. Rute API dikecualikan karena biasanya menggunakan autentikasi stateless berbasis token.

## 2. Bagaimana Laravel mencegah serangan XSS secara default?

**Jawaban**

Laravel secara otomatis meng-escape semua variabel yang ditampilkan melalui sintaks Blade {{ $variable }}. Escaping ini mengonversi karakter HTML khusus menjadi entitas, mencegah eksekusi skrip berbahaya. Untuk menampilkan HTML mentah, Anda harus secara eksplisit menggunakan {!! $variable !!}, yang memaksa developer membuat pilihan secara sadar.

## 3. Apa peran properti $fillable dalam model Eloquent?

**Jawaban**

Properti $fillable mendefinisikan whitelist atribut yang dapat di-mass-assign melalui create() atau update(). Ini melindungi dari serangan mass assignment di mana pengguna jahat dapat mengubah field sensitif seperti is_admin atau role_id. Alternatifnya adalah $guarded yang mendefinisikan blacklist field yang dilindungi.

## 19 pertanyaan lagi tersedia

- Metode mana yang sebaiknya digunakan untuk meng-hash password di Laravel?
- Bagaimana Laravel melindungi dari SQL injection?

Daftar gratis: https://sharpskill.dev/id/login

## Topik wawancara Laravel lainnya

- [Dasar-Dasar PHP](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/php-basics.md): 25 pertanyaan, Junior
- [Dasar OOP PHP](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/php-oop-essentials.md): 20 pertanyaan, Junior
- [Composer & Autoloading](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/composer-autoloading.md): 18 pertanyaan, Junior
- [Dasar-Dasar Laravel](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/laravel-fundamentals.md): 20 pertanyaan, Junior
- [Routing Laravel](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/laravel-routing.md): 20 pertanyaan, Junior
- [Blade Templates](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/blade-templates.md): 18 pertanyaan, Junior
- [Request & Response](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/request-response.md): 20 pertanyaan, Junior
- [Dasar-Dasar Eloquent ORM](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/eloquent-orm-basics.md): 22 pertanyaan, Junior
- [Eloquent Relationships](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/eloquent-relationships.md): 25 pertanyaan, Mid-Level
- [Migrations & Schema Builder](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/database-migrations.md): 20 pertanyaan, Mid-Level
- [Validasi & Formulir](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/validation-forms.md): 22 pertanyaan, Mid-Level
- [Autentikasi](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/authentication.md): 20 pertanyaan, Mid-Level
- [Otorisasi & Policies](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/authorization-policies.md): 18 pertanyaan, Mid-Level
- [API Resources & Authentication](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/api-resources-authentication.md): 26 pertanyaan, Mid-Level
- [Middleware](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/middleware.md): 18 pertanyaan, Mid-Level
- [Service Container & DI](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/service-container-di.md): 20 pertanyaan, Mid-Level
- [Queues & Jobs](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/queues-jobs.md): 22 pertanyaan, Mid-Level
- [Events & Listeners](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/events-listeners.md): 18 pertanyaan, Mid-Level
- [Notifikasi & Mail](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/notifications-mail.md): 20 pertanyaan, Mid-Level
- [File Storage](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/file-storage.md): 18 pertanyaan, Mid-Level
- [Testing & PHPUnit](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/testing-phpunit.md): 24 pertanyaan, Mid-Level
- [Caching](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/caching.md): 18 pertanyaan, Mid-Level
- [Livewire & Inertia](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/livewire-inertia.md): 20 pertanyaan, Mid-Level
- [Eloquent Advanced](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/eloquent-advanced.md): 24 pertanyaan, Senior
- [Repository Pattern](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/repository-pattern.md): 20 pertanyaan, Senior
- [Laravel Packages](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/laravel-packages.md): 20 pertanyaan, Senior
- [Performance Optimization](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/performance-optimization.md): 22 pertanyaan, Senior
- [Laravel Octane](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/laravel-octane.md): 18 pertanyaan, Senior
- [Laravel Distributed Systems](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/laravel-distributed-systems.md): 22 pertanyaan, Senior
- [Observability & Monitoring](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/observability-monitoring.md): 20 pertanyaan, Senior
- [Deployment & DevOps](https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/deployment-devops.md): 20 pertanyaan, Senior

---

Source: SharpSkill (https://sharpskill.dev), tech interview preparation for your real stack.
HTML version of this page: https://sharpskill.dev/id/technologies/laravel/pertanyaan-wawancara/security-best-practices