Attributes added by stimulus_controller should be escaped

[1ed]

When I write

<div {{ attributes.defaults(stimulus_controller('my-controller', { params: ['a', 'b'] })) }}>

then params' value should be escaped as html attributes.

Now it renders

data-controller="my-controller live" data-my-controller-params-value="["a","b"]" ...

instead of

data-controller="my-controller live" data-my-controller-params-value="["a","b"]" ...