[5.x] Abort 404 when asset is not found in AssetsController (#13741)

mynetx · web-flow · commit 6e68536db704 · 2026-01-30T10:09:37.000-05:00
Fixes #13739
diff --git a/src/Http/Controllers/CP/Assets/AssetsController.php b/src/Http/Controllers/CP/Assets/AssetsController.php
@@ -38,6 +38,8 @@ public function show($asset)
     {
         $asset = Asset::find(base64_decode($asset));
 
+        abort_if(! $asset, 404);
+
         // TODO: Auth
 
         return new AssetResource($asset);
@@ -129,6 +131,8 @@ public function download($asset)
     {
         $asset = Asset::find(base64_decode($asset));
 
+        abort_if(! $asset, 404);
+
         // TODO: Auth
 
         return $asset->download();

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,8 @@ public function show($asset)`
`38`	`38`	`{`
`39`	`39`	`$asset = Asset::find(base64_decode($asset));`
`40`	`40`
	`41`	`+ abort_if(! $asset, 404);`
	`42`	`+`
`41`	`43`	`// TODO: Auth`
`42`	`44`
`43`	`45`	`return new AssetResource($asset);`
`@@ -129,6 +131,8 @@ public function download($asset)`
`129`	`131`	`{`
`130`	`132`	`$asset = Asset::find(base64_decode($asset));`
`131`	`133`
	`134`	`+ abort_if(! $asset, 404);`
	`135`	`+`
`132`	`136`	`// TODO: Auth`
`133`	`137`
`134`	`138`	`return $asset->download();`