security - Abrarqasim Blogs

Laravel 13.30: chunkBy() and the Storage::path() Line I Had in Production

Laravel 13.30 adds chunkBy() for adjacent grouping and finally stops Storage::path() escaping the disk root. What changed, what breaks, and what to grep for.

Rayyan | September 4, 2026 | 11 min

Laravel

Laravel Security Audits With the AI Agent You Already Use

An AI agent audited my Laravel app and got it wrong. Laravel Auditor's 75 evidence-first rules and read-only collectors fix the guessing problem. Here's how.

Rayyan | September 1, 2026 | 9 min

AI

Sandboxing AI-Written Python: Check for /dev/kvm First

Before you compare Python sandbox libraries, check whether your host exposes /dev/kvm. It decides which isolation tier you can actually build on.

Rayyan | August 24, 2026 | 9 min

AI

AI Code Review Tools: What I Run Before Merging AI-Written PRs

I almost shipped a phishing URL inside an AI-generated PR. Here are the AI code review tools and checks I now run before any AI-written…

Rayyan | May 16, 2026 | 9 min

AI

LLM Safety Has a Stateless Multi-Turn Blind Spot (And What It Means for Your App)

A new attack exploits the fact that most LLM safety layers evaluate turns in isolation. Here's what the Transient Turn Injection result means for anyone…

Rayyan | April 26, 2026 | 7 min