ldc-loue/app/Http/Middleware/XssSanitizer.php

<?php

namespace App\Http\Middleware;

use App\Lib\ToolboxHelper;
use Illuminate\Http\Request;

class XssSanitizer
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure                 $next
     * @param  mixed                    ...$params
     * @return mixed
     */
    public function handle(Request $request, \Closure $next, ...$params)
    {
        $inputs = $request->all();
        array_walk_recursive($inputs, function (&$input, $name) use ($params) {
            if (!is_string($input)) {
                return;
            }
            if (in_array($name, $params)) {
                // ? Is a json input ?
                if ($isJson = \json_decode($input, true) and is_array($isJson)) {
                    // ! Decode each json field recursive.
                    \array_walk_recursive($isJson, function (&$item) {
                        if (\is_string($item)) {
                            $item = clean($item);
                            $item = ToolboxHelper::stripCkEditorSchemesOnMediaInputs($item);
                        }
                    });
                } else {
                    $input = clean($input);
                    $input = ToolboxHelper::stripCkEditorSchemesOnMediaInputs($input);
                }
            } else {
                $input = strip_tags($input);
                $input = \filter_var($input, FILTER_SANITIZE_STRING);
            }
        });
        $request->merge($inputs);
        return $next($request);
    }
}