Live preview 500's on 5.73.11

[robdekort]

Bug description

I have a website where I updated to 5.73.11 for security reasons. However, after running that update Live Preview breaks for this project. I wasn't able to replicate it on another v5.73.11 however. So it must be something specific.

I currently can't downgrade this site without disabling the composer audit which is something both the client and my are not comfortable with now the security issue is out in the open.

How to reproduce

Hit live preview. Couldn't replicate it on another site, hoping the error rings a bell for you.

Logs

# ErrorException - Internal Server Error

Undefined array key "scheme"

PHP 8.4.18
Laravel 12.53.0

## Stack Trace

0 - vendor/statamic/cms/src/Tokens/Handlers/LivePreview.php:48
1 - vendor/statamic/cms/src/Tokens/Handlers/LivePreview.php:29
2 - vendor/laravel/framework/src/Illuminate/Collections/Arr.php:840
3 - vendor/laravel/framework/src/Illuminate/Collections/Collection.php:829
4 - vendor/statamic/cms/src/Tokens/Handlers/LivePreview.php:29
5 - vendor/statamic/cms/src/Tokens/Token.php:59
6 - vendor/statamic/cms/src/Http/Middleware/HandleToken.php:18
7 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
8 - vendor/statamic/cms/src/Http/Middleware/StacheLock.php:29
9 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
10 - vendor/barryvdh/laravel-debugbar/src/Middleware/InjectDebugbar.php:59
11 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
12 - vendor/laravel/framework/src/Illuminate/Routing/Middleware/SubstituteBindings.php:50
13 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
14 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php:87
15 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
16 - vendor/laravel/framework/src/Illuminate/View/Middleware/ShareErrorsFromSession.php:48
17 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
18 - vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php:120
19 - vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php:63
20 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
21 - vendor/laravel/framework/src/Illuminate/Cookie/Middleware/AddQueuedCookiesToResponse.php:36
22 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
23 - vendor/laravel/framework/src/Illuminate/Cookie/Middleware/EncryptCookies.php:74
24 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
25 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:137
26 - vendor/laravel/framework/src/Illuminate/Routing/Router.php:821
27 - vendor/laravel/framework/src/Illuminate/Routing/Router.php:800
28 - vendor/laravel/framework/src/Illuminate/Routing/Router.php:764
29 - vendor/laravel/framework/src/Illuminate/Routing/Router.php:753
30 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php:200
31 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:180
32 - vendor/statamic/cms/src/Http/Middleware/StopImpersonating.php:12
33 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
34 - vendor/statamic/cms/src/Http/Middleware/DisableFloc.php:17
35 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
36 - vendor/statamic/cms/src/Http/Middleware/CheckMultisite.php:15
37 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
38 - vendor/statamic/cms/src/Http/Middleware/CheckComposerJsonScripts.php:21
39 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
40 - vendor/statamic/cms/src/Http/Middleware/PoweredByHeader.php:18
41 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
42 - vendor/livewire/livewire/src/Features/SupportDisablingBackButtonCache/DisableBackButtonCacheMiddleware.php:19
43 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
44 - vendor/barryvdh/laravel-debugbar/src/Middleware/InjectDebugbar.php:59
45 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
46 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php:21
47 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ConvertEmptyStringsToNull.php:31
48 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
49 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php:21
50 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TrimStrings.php:51
51 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
52 - vendor/laravel/framework/src/Illuminate/Http/Middleware/ValidatePostSize.php:27
53 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
54 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/PreventRequestsDuringMaintenance.php:109
55 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
56 - vendor/laravel/framework/src/Illuminate/Http/Middleware/HandleCors.php:61
57 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
58 - vendor/laravel/framework/src/Illuminate/Http/Middleware/TrustProxies.php:58
59 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
60 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/InvokeDeferredCallbacks.php:22
61 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
62 - vendor/laravel/framework/src/Illuminate/Http/Middleware/ValidatePathEncoding.php:26
63 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:219
64 - vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:137
65 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php:175
66 - vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php:144
67 - vendor/laravel/framework/src/Illuminate/Foundation/Application.php:1220
68 - public/index.php:20
69 - /Applications/Herd.app/Contents/Resources/valet/server.php:167

## Request

GET /

## Headers

* **connection**: keep-alive
* **cookie**: XSRF-TOKEN=eyJpdiI6IlM5WlVsbjJYb1B2ZDZyVkRMUUdtVWc9PSIsInZhbHVlIjoib2hTT0pBUXIzcDhvclRHUHdYS0cwb0hFRlNYb3NuaVEvdTVycXZuZW5jbXBDVkJVYW51MHZMbFFhRkJCNDI5aGlVVU1yNS9rNHhkYnc0blhub0cwT3piMUlDaW1qT3prd1JXOUY2ZXJGYjVYaG9rVWc5clJPL2RaTUx6K3dvc0kiLCJtYWMiOiJkMmY5YzBmYjRhY2IwNjVmMGNmMTRhYmY1Yzg3MmQ2YjAwNGI2MjUwMTE4YTZjMGNjZGMzZGI1ODExMzY5MWVmIiwidGFnIjoiIn0%3D; CLIENT_data_systems_session=eyJpdiI6IkQ0d05XN0szd2lweHJKTTlIZmtyZGc9PSIsInZhbHVlIjoiOStqMkpQUCtRMXQyZU00V0ZBYmRBSHRIMVpVemxhRVYzd0c0a0gwbXp2NzF3NWtrbFI3bXZ0Um9MODJRVmYwbW9QWGlBOWZ3bzJRcTl3SGEwRUtZMU9RVkR4cytwcVR1QzdQY05LYTgxbTA0anh3OUw0c3ZpTmc0aEZjRmgvODEiLCJtYWMiOiJhZGIwY2FiMDZkOTVjZTU4ZWE2NzIzYTVhN2JlODBlZTA3N2RmOGUzNjkxNDA5NTI3YTdjNjY4NzYxMDZlMTJlIiwidGFnIjoiIn0%3D; remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d=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%3D%3D; _ga=GA1.1.761967962.1751985242; _ga_X46X226P77=GS2.1.s1751985241$o1$g0$t1751985241$j60$l0$h0
* **accept-encoding**: gzip, deflate
* **priority**: u=0, i
* **accept-language**: en-US,en;q=0.9
* **referer**: http://SITE.test/cp/collections/pages/entries/home
* **upgrade-insecure-requests**: 1
* **accept**: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
* **user-agent**: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3 Safari/605.1.15
* **host**: SITE.test

## Route Context

controller: Statamic\Http\Controllers\FrontendController@index
route name: statamic.site
middleware: web, statamic.web

## Route Parameters

No route parameter data available.

## Database Queries

* fake - select id from entries where collection in ('pages') and site = 'en' (13.21 ms)
* fake - select * from entries where id = 'home' (151.6 ms)
* fake - select * from entries where id in ('5942acb5-df2c-4d08-9e57-6c87ef47d64c') (1.74 ms)
* fake - select * from entries where collection in ('products') and id in ('5942acb5-df2c-4d08-9e57-6c87ef47d64c') and published = '1' and (collection in ('products') or (collection in ('products') and collectionHandle = 'products')) (0.9 ms)
* fake - select * from entries where id in ('9529fd56-9659-494a-898e-ed8ff0b78f3e') (1.26 ms)
* fake - select * from entries where collection in ('products') and id in ('9529fd56-9659-494a-898e-ed8ff0b78f3e') and published = '1' and (collection in ('products') or (collection in ('products') and collectionHandle = 'products')) (0.23 ms)
* fake - select * from entries where id in ('f9a46edd-fec1-4ae1-a42d-10901263d78f', 'a00af119-2cc4-44f2-a723-f42fd6de3da2', 'b49b1062-03f0-44b4-a280-10d1a413262b', '878311e3-4996-4754-ba25-6088a6a3e3c4', 'd3441546-1964-4739-b0ab-a0d3a8264867', '9af26069-848b-4631-baa5-687a4588101b', '96c10393-607f-43a3-a631-e4186b685150', '9a2298f3-0828-477d-bde8-c219729e1c34', 'e93e0e3c-1280-4361-8aee-55711eacca8b', '8a25ce5e-1d7f-4f46-8645-3a6353275bcc', '18c4b5f4-9cc1-484f-b872-2dc056a24278', '10a08ec9-23e5-4cf2-a7d4-d5fc909768cd', '784fc178-91a3-4811-be76-e11c2e6ef209', '351153c0-9079-40de-b91b-ccaf8297b88c', '53777dab-c723-47eb-b7f1-baa70e478c6b', 'f0c8f0f7-8d33-4998-ad1b-4e4b5459e88c', '1c674efe-b31c-487c-b35a-d35f3cc26271', 'd3b32fcb-c0e3-4285-9ce2-e21531503bcb', '4faaef33-8189-499e-a05d-13d57523bbf3', '4eb15650-3dca-4769-a388-5ce258b3a00e', '565f4895-04b0-41e5-ae50-98b96f0552df', 'eac3bc5e-68fe-4d5d-81dd-d59535710b7b', 'b15e504b-2f86-4995-8821-773400f161c0', '791ffbdd-6b78-4420-9581-e871a3ebbb41') (5.15 ms)
* fake - select * from entries where id in ('f9a46edd-fec1-4ae1-a42d-10901263d78f', 'a00af119-2cc4-44f2-a723-f42fd6de3da2', 'b49b1062-03f0-44b4-a280-10d1a413262b', '878311e3-4996-4754-ba25-6088a6a3e3c4', 'd3441546-1964-4739-b0ab-a0d3a8264867', '9af26069-848b-4631-baa5-687a4588101b', '96c10393-607f-43a3-a631-e4186b685150', '9a2298f3-0828-477d-bde8-c219729e1c34', 'e93e0e3c-1280-4361-8aee-55711eacca8b', '8a25ce5e-1d7f-4f46-8645-3a6353275bcc', '18c4b5f4-9cc1-484f-b872-2dc056a24278', '10a08ec9-23e5-4cf2-a7d4-d5fc909768cd', '784fc178-91a3-4811-be76-e11c2e6ef209', '351153c0-9079-40de-b91b-ccaf8297b88c', '53777dab-c723-47eb-b7f1-baa70e478c6b', 'f0c8f0f7-8d33-4998-ad1b-4e4b5459e88c', '1c674efe-b31c-487c-b35a-d35f3cc26271', 'd3b32fcb-c0e3-4285-9ce2-e21531503bcb', '4faaef33-8189-499e-a05d-13d57523bbf3', '4eb15650-3dca-4769-a388-5ce258b3a00e', '565f4895-04b0-41e5-ae50-98b96f0552df', 'eac3bc5e-68fe-4d5d-81dd-d59535710b7b', 'b15e504b-2f86-4995-8821-773400f161c0', '791ffbdd-6b78-4420-9581-e871a3ebbb41') (1.6 ms)
* fake - select * from entries where collection in ('clients') and id in ('f9a46edd-fec1-4ae1-a42d-10901263d78f', 'a00af119-2cc4-44f2-a723-f42fd6de3da2', 'b49b1062-03f0-44b4-a280-10d1a413262b', '878311e3-4996-4754-ba25-6088a6a3e3c4', 'd3441546-1964-4739-b0ab-a0d3a8264867', '9af26069-848b-4631-baa5-687a4588101b', '96c10393-607f-43a3-a631-e4186b685150', '9a2298f3-0828-477d-bde8-c219729e1c34', 'e93e0e3c-1280-4361-8aee-55711eacca8b', '8a25ce5e-1d7f-4f46-8645-3a6353275bcc', '18c4b5f4-9cc1-484f-b872-2dc056a24278', '10a08ec9-23e5-4cf2-a7d4-d5fc909768cd', '784fc178-91a3-4811-be76-e11c2e6ef209', '351153c0-9079-40de-b91b-ccaf8297b88c', '53777dab-c723-47eb-b7f1-baa70e478c6b', 'f0c8f0f7-8d33-4998-ad1b-4e4b5459e88c', '1c674efe-b31c-487c-b35a-d35f3cc26271', 'd3b32fcb-c0e3-4285-9ce2-e21531503bcb', '4faaef33-8189-499e-a05d-13d57523bbf3', '4eb15650-3dca-4769-a388-5ce258b3a00e', '565f4895-04b0-41e5-ae50-98b96f0552df', 'eac3bc5e-68fe-4d5d-81dd-d59535710b7b', 'b15e504b-2f86-4995-8821-773400f161c0', '791ffbdd-6b78-4420-9581-e871a3ebbb41') and published = '1' and (collection in ('clients') or (collection in ('clients') and collectionHandle = 'clients')) (2.46 ms)
* fake - select * from assets where container = 'images' and path in ('clients/m-and-s-logo.svg') (35.73 ms)
* fake - select * from assets where container = 'images' and path in ('clients/tate-logo.svg') (0.35 ms)
* fake - select * from assets where container = 'images' and path in ('clients/nottinghamct.svg') (0.33 ms)
* fake - select * from assets where container = 'images' and path in ('clients/nhs.svg') (0.29 ms)
* fake - select * from assets where container = 'images' and path in ('clients/ccrce-stacked.png') (0.3 ms)
* fake - select * from assets where container = 'images' and path in ('clients/costa-coffee-seeklogo-scaled-2-1723126333.svg') (0.32 ms)
* fake - select * from assets where container = 'images' and path in ('clients/dhl-logo.svg') (0.29 ms)
* fake - select * from assets where container = 'images' and path in ('clients/teamsport.svg') (0.3 ms)
* fake - select * from assets where container = 'images' and path in ('clients/transport-met-barcelona.svg') (0.3 ms)
* fake - select * from assets where container = 'images' and path in ('clients/turkish_airlines_logo-scaled-1723126486.svg') (0.29 ms)
* fake - select * from assets where container = 'images' and path in ('kings-college-hospital.png') (0.3 ms)
* fake - select * from assets where container = 'images' and path in ('lunds-universitet.png') (0.46 ms)
* fake - select * from assets where container = 'images' and path in ('clients/uni-of-birmingham.png') (0.34 ms)
* fake - select * from assets where container = 'images' and path in ('minister-de-l-interieur-logo.png') (0.68 ms)
* fake - select * from assets where container = 'images' and path in ('ports-of-jersey-logo-2.png') (0.35 ms)
* fake - select * from assets where container = 'images' and path in ('piraeus760.png') (0.47 ms)
* fake - select * from assets where container = 'images' and path in ('value-retail_idy5rcqg2h_0.png') (0.32 ms)
* fake - select * from assets where container = 'images' and path in ('witherslack-g.png') (0.34 ms)
* fake - select * from assets where container = 'images' and path in ('clients/unity-schools-partnership.png') (0.32 ms)
* fake - select * from assets where container = 'images' and path in ('salt-lake-community-college.png') (0.33 ms)
* fake - select * from assets where container = 'images' and path in ('clients/the-guardian-logo.svg') (0.32 ms)
* fake - select * from assets where container = 'images' and path in ('boston-children-s.png') (0.32 ms)
* fake - select * from assets where container = 'images' and path in ('boston-scientific.png') (0.32 ms)
* fake - select * from assets where container = 'images' and path in ('lille-small.png') (0.31 ms)
* fake - select * from assets where container = 'images' and path in ('product-screenshots/new-mask-settings.jpg') (0.34 ms)
* fake - select * from assets where container = 'images' and path in ('product-screenshots/new-import-settings.jpg') (0.38 ms)
* fake - select * from assets where container = 'images' and path in ('product-screenshots/new-advanced-detection.jpg') (0.32 ms)
* fake - select * from entries where id in ('5ccbe727-bfe4-421b-855f-3e39931cb26d') (0.97 ms)
* fake - select * from entries where collection in ('products') and id in ('5ccbe727-bfe4-421b-855f-3e39931cb26d') and published = '1' and (collection in ('products') or (collection in ('products') and collectionHandle = 'products')) (0.22 ms)
* fake - select * from entries where id in ('9958a21d-5a04-4716-b40d-b67039a5727b', 'cf753a17-530c-444f-af4b-a5fa0a515623', 'cc7dec3a-d423-4d88-84e6-9e1d51afc881') (1.52 ms)
* fake - select * from entries where collection in ('testimonials') and id in ('9958a21d-5a04-4716-b40d-b67039a5727b', 'cf753a17-530c-444f-af4b-a5fa0a515623', 'cc7dec3a-d423-4d88-84e6-9e1d51afc881') and published = '1' and (collection in ('testimonials') or (collection in ('testimonials') and collectionHandle = 'testimonials')) (0.81 ms)
* fake - select * from entries where id in ('50cf6918-9905-4f17-8ed0-d46831d173f7') (0.75 ms)
* fake - select * from entries where collection in ('clients') and id in ('50cf6918-9905-4f17-8ed0-d46831d173f7') and published = '1' and (collection in ('clients') or (collection in ('clients') and collectionHandle = 'clients')) (0.81 ms)
* fake - select * from assets where container = 'images' and path in ('nottingham-city-transport_logo_0.svg') (0.32 ms)
* fake - select * from entries where id in ('18c4b5f4-9cc1-484f-b872-2dc056a24278') (0.57 ms)
* fake - select * from entries where collection in ('clients') and id in ('18c4b5f4-9cc1-484f-b872-2dc056a24278') and published = '1' and (collection in ('clients') or (collection in ('clients') and collectionHandle = 'clients')) (0.79 ms)
* fake - select * from entries where id in ('d995cf46-4d3f-490b-a569-e6e30f031bbd') (0.78 ms)
* fake - select * from entries where collection in ('clients') and id in ('d995cf46-4d3f-490b-a569-e6e30f031bbd') and published = '1' and (collection in ('clients') or (collection in ('clients') and collectionHandle = 'clients')) (0.79 ms)
* fake - select * from assets where container = 'images' and path in ('wembley-park_idq3dld4hr_1.svg') (0.31 ms)
* fake - select * from entries where id in ('48faf298-7cd6-4523-a462-26edba703383') (1.74 ms)
* fake - select * from entries where collection in ('industries') and id in ('48faf298-7cd6-4523-a462-26edba703383') and published = '1' and (collection in ('industries') or (collection in ('industries') and collectionHandle = 'industries')) (0.49 ms)
* fake - select * from assets where container = 'images' and path in ([]) (0.31 ms)
* fake - select * from entries where id in ('fc65fee9-16c6-405f-8064-60fa696dafb2') (1.2 ms)
* fake - select * from entries where collection in ('industries') and id in ('fc65fee9-16c6-405f-8064-60fa696dafb2') and published = '1' and (collection in ('industries') or (collection in ('industries') and collectionHandle = 'industries')) (0.23 ms)
* fake - select * from entries where id in ('d08b7c0f-d88a-4f4a-87d8-c0ebd0649e15') (0.9 ms)
* fake - select * from entries where collection in ('industries') and id in ('d08b7c0f-d88a-4f4a-87d8-c0ebd0649e15') and published = '1' and (collection in ('industries') or (collection in ('industries') and collectionHandle = 'industries')) (0.19 ms)
* fake - select * from entries where id in ('64306df8-9000-45fc-9ca2-373f14f54819') (0.84 ms)
* fake - select * from entries where collection in ('industries') and id in ('64306df8-9000-45fc-9ca2-373f14f54819') and published = '1' and (collection in ('industries') or (collection in ('industries') and collectionHandle = 'industries')) (0.2 ms)
* fake - select * from entries where id in ('2f3d51c4-b8e7-4bac-98f3-cae8349f2823') (1.03 ms)
* fake - select * from entries where collection in ('industries') and id in ('2f3d51c4-b8e7-4bac-98f3-cae8349f2823') and published = '1' and (collection in ('industries') or (collection in ('industries') and collectionHandle = 'industries')) (0.21 ms)
* fake - select * from entries where id in ('fa502d9f-dd8e-417f-857e-70ab56532e5f') (0.81 ms)
* fake - select * from entries where collection in ('industries') and id in ('fa502d9f-dd8e-417f-857e-70ab56532e5f') and published = '1' and (collection in ('industries') or (collection in ('industries') and collectionHandle = 'industries')) (0.24 ms)
* fake - select * from entries where id in ('5b9ad4c9-74b9-4efd-9071-422aa1d5692e', '0293ae36-3c66-4f27-9790-3a25aa7788bf') (11.07 ms)
* fake - select * from entries where id in ('5b9ad4c9-74b9-4efd-9071-422aa1d5692e', '0293ae36-3c66-4f27-9790-3a25aa7788bf') (0.86 ms)
* fake - select * from entries where collection in ('case_studies') and id in ('5b9ad4c9-74b9-4efd-9071-422aa1d5692e', '0293ae36-3c66-4f27-9790-3a25aa7788bf') and published = '1' and (collection in ('case_studies') or (collection in ('case_studies') and collectionHandle = 'case_studies' and date < '2026-03-03 11:56:19')) (1.32 ms)
* fake - select * from entries where collection in ('case_studies') and id in ('5b9ad4c9-74b9-4efd-9071-422aa1d5692e', '0293ae36-3c66-4f27-9790-3a25aa7788bf') and published = '1' and (collection in ('case_studies') or (collection in ('case_studies') and collectionHandle = 'case_studies' and date < '2026-03-03 11:56:19')) and published = '1' and (collection in ('case_studies') or (collection in ('case_studies') and collectionHandle = 'case_studies' and date < '2026-03-03 11:56:19')) (0.43 ms)
* fake - select * from entries where id in ('52784cb7-60d5-4580-b338-762542f1d1b9') (0.74 ms)
* fake - select * from entries where collection in ('clients') and id in ('52784cb7-60d5-4580-b338-762542f1d1b9') and published = '1' and (collection in ('clients') or (collection in ('clients') and collectionHandle = 'clients')) (0.8 ms)
* fake - select * from assets where container = 'images' and path in ('river-island-white.png') (0.34 ms)
* fake - select * from assets where container = 'images' and path in ('case-studies/retail-shopping.png') (0.3 ms)
* fake - select * from entries where id in ('7cfedb93-2aee-404e-b1a5-c10ae0e30309') (0.8 ms)
* fake - select * from entries where collection in ('testimonials') and id in ('7cfedb93-2aee-404e-b1a5-c10ae0e30309') and published = '1' and (collection in ('testimonials') or (collection in ('testimonials') and collectionHandle = 'testimonials')) (0.21 ms)
* fake - select * from entries where id in ('5aa4f63e-6dd0-4e68-8ff1-956cc56f1a94') (0.71 ms)
* fake - select * from entries where collection in ('clients') and id in ('5aa4f63e-6dd0-4e68-8ff1-956cc56f1a94') and published = '1' and (collection in ('clients') or (collection in ('clients') and collectionHandle = 'clients')) (0.82 ms)
* fake - select * from assets where container = 'images' and path in ('kingston-technology-white.png') (0.31 ms)
* fake - select * from assets where container = 'images' and path in ('warehouse.png') (0.32 ms)
* fake - select * from entries where id in ('035b6a1b-28a1-4812-b253-679c19b70305') (0.89 ms)
* fake - select * from entries where collection in ('testimonials') and id in ('035b6a1b-28a1-4812-b253-679c19b70305') and published = '1' and (collection in ('testimonials') or (collection in ('testimonials') and collectionHandle = 'testimonials')) (0.22 ms)
* fake - select * from assets where container = 'images' and path in ('people/team-photo.png') (0.34 ms)
* fake - select * from entries where id in ('8273d054-d117-464f-a94b-cd54b1cfac61') (1 ms)
* fake - select * from entries where collection in ('pages') and id in ('8273d054-d117-464f-a94b-cd54b1cfac61') and published = '1' and (collection in ('pages') or (collection in ('pages') and collectionHandle = 'pages')) (0.73 ms)
* fake - select * from entries where id in ('ca6ef12b-713f-4a3b-9a4c-3a2ed6d884b0') (0.98 ms)
* fake - select * from entries where collection in ('pages') and id in ('ca6ef12b-713f-4a3b-9a4c-3a2ed6d884b0') and published = '1' and (collection in ('pages') or (collection in ('pages') and collectionHandle = 'pages')) (0.29 ms)
* fake - select * from entries where id in ('38c0caf6-3071-41ad-920a-679fc3819a65') (0.88 ms)
* fake - select * from entries where collection in ('products') and id in ('38c0caf6-3071-41ad-920a-679fc3819a65') and published = '1' and (collection in ('products') or (collection in ('products') and collectionHandle = 'products')) (0.2 ms)
* fake - select * from entries where id = 'home' (0.84 ms)
* fake - select * from entries where id = '0a224438-77fa-4023-b685-6c726b5b35c0' (0.96 ms)
* fake - select * from entries where id = '60180f40-26df-443b-bc49-8cb574586d1d' (0.91 ms)
* fake - select * from entries where id = 'b6eb70b3-806d-4518-b3e6-a186992d13b2' (0.91 ms)
* fake - select * from entries where collection in ('pages') and id = 'home' (0.24 ms)
* fake - select * from entries where collection in ('pages') and id = 'home' (0.2 ms)
* fake - select * from entries where collection in ('pages') and id = 'home' (0.2 ms)
* fake - select * from entries where collection in ('pages') and origin = 'home' (2.32 ms)
* fake - select * from entries where collection in ('pages') and origin = '3eda8b88-da5a-4bdf-b7e0-8d3d187a8195' (0.06 ms)
* fake - select * from entries where collection in ('pages') and origin = '61af511c-51f9-464d-9d99-cc06917a3d87' (0.06 ms)
* fake - select * from entries where collection in ('pages') and origin = 'c9764120-fec4-4b10-8b6f-18ae4b115b73' (0.05 ms)
* fake - select id from entries where collection in ('pages') and site = 'analytics' (0.09 ms)
* fake - select * from assets where container = 'images' and path in ('seo/SITE-logo-mark.png') (0.33 ms)
* fake - select * from assets where container = 'social_images' and path in ('og-02.jpg') (1.74 ms)
* fake - select * from entries where id in ('d62dfc51-d1cf-4787-a082-c9e34906eb64') (0.8 ms)
* fake - select * from entries where collection in ('pages') and id in ('d62dfc51-d1cf-4787-a082-c9e34906eb64') and published = '1' and (collection in ('pages') or (collection in ('pages') and collectionHandle = 'pages')) (0.26 ms)
* fake - select * from assets where container = 'favicons' and path in ('favicon.svg') (2.78 ms)

Environment

Environment
Laravel Version: 12.53.0
PHP Version: 8.4.18
Composer Version: 2.9.3
Environment: local
Debug Mode: ENABLED
Maintenance Mode: OFF
Timezone: UTC
Locale: en

Cache
Config: NOT CACHED
Events: NOT CACHED
Routes: NOT CACHED
Views: CACHED

Drivers
Broadcasting: log
Cache: file
Database: sqlite
Logs: stack / single
Mail: smtp
Queue: sync
Session: file

Storage
public/storage: NOT LINKED

Locales
Installed: en, fr, it
LaravelLang\Actions\Plugin: 1.12.0
LaravelLang\Attributes\Plugin: 2.15.3
LaravelLang\HttpStatuses\Plugin: 3.12.1
LaravelLang\Lang\Plugin: 15.28.5
LaravelLang\MoonShine\Plugin: INCORRECT
LaravelLang\StarterKits\Plugin: 1.9.0
Locales Version: 2.10.0
Protected: en
Publisher Version: 16.7.1

Livewire
Livewire: v4.2.1

Statamic
Addons: 10
Sites: 4 (Main English, Main French, Main Italian, Analytics English)
Stache Watcher: Enabled (auto)
Static Caching: Disabled
Version: 5.73.11 PRO

Statamic Addons
jacksleight/statamic-bard-mutator: 3.0.5
marcorieser/statamic-livewire: 5.2.1
mitydigital/statamic-logger: 2.4.0
mitydigital/statamic-two-factor: 2.7.3
rias/statamic-color-swatches: 2.3.1
stillat/relationships: 2.4.0
studio1902/statamic-peak-browser-appearance: 3.6.1
studio1902/statamic-peak-commands: 9.9.1
studio1902/statamic-peak-seo: 8.26.2
studio1902/statamic-peak-tools: 7.5.1

Installation

Fresh statamic/statamic site via CLI

Additional details

No response

[robdekort]

It might be related to this: #14092. Currently investigating. This site is 3 years old and massive.

[robdekort]

I can't seem to find antlers: true on any of the fieldsets and blueprints on this project. So I'm not sure if it's related.

[robdekort]

Ok, after drilling down a bit, I've removed everything from my layout file and the error still triggers...

[o1y]

@robdekort Could you share your sites config? It could be that any of them use Antlers expressions or a config key that might not be in the default view config allowlist. #14058

[robdekort]

Hey @o1y, thanks. Yeah @edalzell was helping me debug just now and we indeed found {{ config: }} in the sites.yaml. But using:

'allowedContentTags' => ['config:*'],

Doesn't seem to solve the issue either.

[robdekort]

Nor does 'allowedContentTags' => ['config:*', 'permalink', 'parent_uri'], found some more antlers in collection route configs.

[o1y]

I think you need view_config_allowlist in system.php, if you are using a config key that's not already in the defaults.

// config/statamic/system.php
'view_config_allowlist' => [
  '@default', // spreads the defaults into this array
  'package-name.config-name',
],

[robdekort]

I copy that or add stuff to it?

[o1y]

You need to copy that with @default plus your custom config key

[robdekort]

Sorry, I don't get it.

[robdekort]

I do think "small breaking change" is a bit of understatement here.... 😬

[o1y]

Ah maybe I misunderstood. Are you using {{ config: }} (without a key?) in your sites.yaml, or a specific key like {{ config:foo }}? As far as I understand, this needs to be added to the system config:

// config/statamic/system.php
'view_config_allowlist' => [
  '@default', 
  'foo', // your custom key
],

[mrshljivovica]

I copy that or add stuff to it?

You have to add

'view_config_allowlist' => [
  '@default', // spreads the defaults into this array
  // and here your custom (not default) env variables
],

I had 5 broken websites yesterday because of this.

[robdekort]

I just figured it out:

'view_config_allowlist' => [
    '@default', // spreads the defaults into this array
    'app.url',
    'app.url_2',
],

[robdekort]

I would have never figured this out based on the relatively vague PR description alone. Thanks for you help @o1y and @edalzell! It took about 3 hours...

Also: this (not small and breaking) change (I understand it's required for security reasons) will likely cause a shit ton of friction for people. Could this be made easier for folks, somehow?

Update: I wonder if people will even see the update instructions since it's not a major version update.