@@ -53,37 +53,61 @@
-
@endif
+
+
+
@endsection
diff --git a/resources/views/pages/thankyou.blade.php b/resources/views/pages/thankyou.blade.php
index 8ea6c7b..f0b0ef4 100644
--- a/resources/views/pages/thankyou.blade.php
+++ b/resources/views/pages/thankyou.blade.php
@@ -1,34 +1,5 @@
@extends('layouts.site')
@section('content')
-
-
-
+
@endsection
\ No newline at end of file
diff --git a/resources/views/pages/work.blade.php b/resources/views/pages/work.blade.php
index ebed11c..ac544c5 100644
--- a/resources/views/pages/work.blade.php
+++ b/resources/views/pages/work.blade.php
@@ -1,5 +1,35 @@
@extends('layouts.site')
+@push('head')
+@if(!empty($seo['meta_description']))
+
+@endif
+@if(!empty($seo['meta_keywords']))
+
+@endif
+@if(!empty($seo['meta_author']))
+
+@endif
+@if(!empty($seo['meta_publisher']))
+
+@endif
+@if(!empty($seo['meta_copyright']))
+
+@endif
+@if(!empty($seo['meta_refresh']))
+
+@endif
+
+
+@if(!empty($seo['og_description']))
+
+@endif
+@if(!empty($seo['og_image']))
+
+@endif
+
+@endpush
+
@section('content')
+
+
+
@endsection
@push('scripts')
diff --git a/routes/web.php b/routes/web.php
index de1d04d..b0c022f 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -14,13 +14,13 @@ Route::prefix('{locale}')
->group(function () {
Route::get('/', [PageController::class, 'home'])->name('home');
Route::get('/index', [PageController::class, 'home'])->name('index');
- Route::get('/about', [PageController::class, 'about'])->name('about');
- Route::get('/work', [PageController::class, 'work'])->name('work');
+ Route::get('/studio', [PageController::class, 'about'])->name('about');
+ Route::get('/portfolio', [PageController::class, 'work'])->name('work');
Route::get('/project/{projectId?}/{slug?}', [PageController::class, 'project'])
->whereNumber('projectId')
->name('project');
Route::get('/contact', [PageController::class, 'contact'])->name('contact');
- Route::post('/contact', [PageController::class, 'submitContact'])->name('contact.submit');
+ Route::post('/contact', [PageController::class, 'submitContact'])->middleware('throttle:3,1')->name('contact.submit');
#Route::get('/terms', [PageController::class, 'terms'])->name('terms');
Route::get('/thankyou', [PageController::class, 'thankyou'])->name('thankyou');
Route::any('/page/{id}/{title?}', [MainController::class, 'Page'])->name('page');
diff --git a/tests/Feature/BlockEditEncodingTest.php b/tests/Feature/BlockEditEncodingTest.php
index 878ccef..2398087 100644
--- a/tests/Feature/BlockEditEncodingTest.php
+++ b/tests/Feature/BlockEditEncodingTest.php
@@ -2,6 +2,7 @@
use Illuminate\Support\Facades\View;
use Klevze\ControlPanel\Facades\ActiveLanguage;
+use Klevze\ControlPanel\Core\SecurityHelper;
use cPad\Plugins\Blocks\Controllers\BlockController;
it('renders decoded html in the block editor form', function () {
@@ -78,3 +79,13 @@ it('renders frontend language tabs in the block editor', function () {
expect($html)->toContain('English');
expect($html)->toContain('Slovenian');
});
+
+it('preserves iframe query parameters while removing actual event attributes', function () {
+ $html = '
';
+
+ $sanitized = SecurityHelper::sanitizeInput($html);
+
+ expect($sanitized)->toContain('responsive=true');
+ expect($sanitized)->not->toContain('resptrue');
+ expect($sanitized)->not->toContain('onload=');
+});
diff --git a/tests/Feature/ContactFormSubmissionTest.php b/tests/Feature/ContactFormSubmissionTest.php
new file mode 100644
index 0000000..d990023
--- /dev/null
+++ b/tests/Feature/ContactFormSubmissionTest.php
@@ -0,0 +1,69 @@
+withSession(['contact_form_started_at' => now()->subSeconds(10)->timestamp]);
+
+ post('/sl/contact', [
+ 'name' => 'Gregor Test',
+ 'email' => 'gregor@example.com',
+ 'message' => "Hello from the website\nSecond line",
+ 'website' => '',
+ ])->assertRedirect('/sl/thankyou');
+
+ Mail::assertSent(ContactFormSubmission::class, function (ContactFormSubmission $mail) {
+ return $mail->hasTo('office@aritmija.si')
+ && $mail->hasReplyTo('gregor@example.com')
+ && $mail->contactDetails['name'] === 'Gregor Test'
+ && $mail->contactDetails['email'] === 'gregor@example.com'
+ && $mail->contactDetails['message'] === "Hello from the website\nSecond line";
+ });
+});
+
+it('blocks submissions that arrive too quickly', function () {
+ Mail::fake();
+
+ Carbon::setTestNow('2026-05-21 12:00:00');
+
+ $this->withSession(['contact_form_started_at' => now()->timestamp]);
+
+ post('/sl/contact', [
+ 'name' => 'Gregor Test',
+ 'email' => 'gregor@example.com',
+ 'message' => 'Fast bot message',
+ 'website' => '',
+ ])
+ ->assertSessionHasErrors('form');
+
+ Mail::assertNothingSent();
+});
+
+it('blocks submissions that fill the honeypot field', function () {
+ Mail::fake();
+
+ Carbon::setTestNow('2026-05-21 12:00:00');
+
+ $this->withSession(['contact_form_started_at' => now()->subSeconds(10)->timestamp]);
+
+ post('/sl/contact', [
+ 'name' => 'Gregor Test',
+ 'email' => 'gregor@example.com',
+ 'message' => 'Bot payload',
+ 'website' => 'https://spam.example',
+ ])
+ ->assertSessionHasErrors('website');
+
+ Mail::assertNothingSent();
+});
\ No newline at end of file
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
+ 
- @else
- 
- @endif
- 
- @else
- 
- @endif
-