escape merged attributes by default

illuminate · Mar 14, 2020 · 1c2a9e3 · 1c2a9e3
1 parent 7936725
commit 1c2a9e3
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ComponentAttributeBag.php b/ComponentAttributeBag.php
@@ -108,6 +108,10 @@ public function merge(array $attributeDefaults = [])
     {
         $attributes = [];
 
+        $attributeDefaults = array_map(function ($value) {
+            return e($value);
+        }, $attributeDefaults);
+
         foreach ($this->attributes as $key => $value) {
             if ($value === true) {
                 $attributes[$key] = $key;