laravel/framework — pull request #6407 by fnwbr (2014-11-13 23:17:46+00:00)
Title: [5.0] FormRequests check authorization before validating

Don't know if this was on purpose, but I think authorization should be done before touching any of the input.
Please let me know if there is a reason for doing it the other way round. :blush: