allow quotes in todo's

gwleuverink · Aug 15, 2024 · 9fd011e · 9fd011e
1 parent 4d3cfa4
commit 9fd011e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/CommentsPrecompiler.php b/src/CommentsPrecompiler.php
@@ -27,7 +27,7 @@ protected static function compileTodosMark($view, $openComment, $closeComment)
         // Process each match
         foreach ($matches as $match) {
             $fullComment = $match[0];  // Full comment including {{-- and --}}
-            $commentBody = self::trimColons($match[1]);  // Comment body without {{-- TODO: and --}}
+            $commentBody = htmlspecialchars(self::trimColons($match[1]));  // Comment body without {{-- TODO: and --}}
 
             $magicTodoComponent = <<< BLADE
             <x-magic-todo::highlight todo="{$commentBody}" />
@@ -60,7 +60,7 @@ protected static function compileWrappedBladeTodos($view, $openComment, $closeCo
         foreach ($matches as $match) {
 
             $todoBlock = trim($match[1]); // Everything between TODO & ENDTODO including the wrapping comments
-            $todoComment = self::trimColons($match[2]);  // Just the text inside the TODO comment
+            $todoComment = htmlspecialchars(self::trimColons($match[2]));  // Just the text inside the TODO comment
             $content = trim($match[3]);  // The content between TODO and ENDTODO
 
             $magicTodoComponent = <<< BLADE