Securing Laravel Applications

What are the best practices for securing Laravel applications? How can developers protect against common vulnerabilities like SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF)?