fix: escape style object value in precompile transform

Author: marvinhagemeister

jsx-runtime/src/index.js

@@ -133,7 +133,7 @@ function jsxAttr(name, value) {
 				str = str + name + ':' + val + suffix;
 			}
 		}
-		return name + '="' + str + '"';
+		return name + '="' + encodeEntities(str) + '"';
 	}
 
 	if (

jsx-runtime/test/browser/jsx-runtime.test.js

@@ -162,6 +162,9 @@ describe('precompiled JSX', () => {
 
 		it('should escape values', () => {
 			expect(jsxAttr('foo', "&<'")).to.equal('foo="&amp;&lt;\'"');
+			expect(jsxAttr('style', { foo: `"&<'"` })).to.equal(
+				'style="foo:&quot;&amp;&lt;\'&quot;;"'
+			);
 		});
 
 		it('should call options.attr()', () => {