[TwigComponent] Fix escaping of Alpine.js attribute keys containing numeric characters

klausi85 · Kocal · commit dc992f76f423 · 2025-06-13T14:18:52.000+02:00
diff --git a/src/TwigComponent/src/ComponentAttributes.php b/src/TwigComponent/src/ComponentAttributes.php
@@ -80,7 +80,7 @@ public function __toString(): string
             //      xml:*, xmlns:*,
             // - special syntax names (Vue.js, Svelte, Alpine.js, ...)
             //      v-*, x-*, @*, :*
-            if (!ctype_alpha(str_replace(['-', '_', ':', '@', '.'], '', $key))) {
+            if (!ctype_alnum(str_replace(['-', '_', ':', '@', '.'], '', $key))) {
                 $key = (string) $this->escaper->escape($key, 'html_attr');
             }
 
diff --git a/src/TwigComponent/tests/Unit/ComponentAttributesTest.php b/src/TwigComponent/tests/Unit/ComponentAttributesTest.php
@@ -324,6 +324,7 @@ public static function provideSpecialSyntaxAttributeNames(): iterable
         yield ['@click'];
         // Alpine.js
         yield ['x-on:click'];
+        yield ['@input.debounce.500ms'];
     }
 
     public function testThrowsTypeErrorWithoutEscaperRuntime(): void

Original file line number	Diff line number	Diff line change
`@@ -80,7 +80,7 @@ public function __toString(): string`
`80`	`80`	`// xml:, xmlns:,`
`81`	`81`	`// - special syntax names (Vue.js, Svelte, Alpine.js, ...)`
`82`	`82`	`// v-, x-, @, :`
`83`		`- if (!ctype_alpha(str_replace(['-', '_', ':', '@', '.'], '', $key))) {`
	`83`	`+ if (!ctype_alnum(str_replace(['-', '_', ':', '@', '.'], '', $key))) {`
`84`	`84`	`$key = (string) $this->escaper->escape($key, 'html_attr');`
`85`	`85`	`}`
`86`	`86`
Original file line number	Diff line number	Diff line change
`@@ -324,6 +324,7 @@ public static function provideSpecialSyntaxAttributeNames(): iterable`
`324`	`324`	`yield ['@click'];`
`325`	`325`	`// Alpine.js`
`326`	`326`	`yield ['x-on:click'];`
	`327`	`+ yield ['@input.debounce.500ms'];`
`327`	`328`	`}`
`328`	`329`
`329`	`330`	`public function testThrowsTypeErrorWithoutEscaperRuntime(): void`