Prevent href attribute from escaping ampersands

livewire · Oct 3, 2024 · 68a4ef5 · 68a4ef5
1 parent a4834da
commit 68a4ef5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/stubs/resources/views/flux/button-or-link.blade.php b/stubs/resources/views/flux/button-or-link.blade.php
@@ -15,7 +15,8 @@
 @endphp
 
 <?php if ($href): ?>
-    <a href="{{ $href }}" {{ $attributes->merge(['data-current' => $current]) }}>
+    {{-- We are using e() here to escape the href attribute value instead of "{{ }}" because the latter will escape the entire attribute value, including the "&" character... --}}
+    <a href="{!! e($href) !!}" {{ $attributes->merge(['data-current' => $current]) }}>
         {{ $slot }}
     </a>
 <?php else: ?>