mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-14 00:33:44 -04:00
The create endpoint checked $validator->failed(), which is always empty, so its validation rules never ran. The start step also read instant_deploy loosely, so a write-only token could send "false" and still start the database. - Use $validator->fails() so invalid input returns 422 - Read instant_deploy with $request->boolean() for the gate and the start