Merge pull request codeigniter4#9760 from ddevsr/patch-4

samsonasik · web-flow · commit ddc06b5fef69 · 2025-10-15T11:05:18.000+07:00
chore: bump `laminas/laminas-escaper` to `v2.18` as minimum
diff --git a/admin/framework/composer.json b/admin/framework/composer.json
@@ -13,7 +13,7 @@
         "php": "^8.2",
         "ext-intl": "*",
         "ext-mbstring": "*",
-        "laminas/laminas-escaper": "^2.17",
+        "laminas/laminas-escaper": "^2.18",
         "psr/log": "^3.0"
     },
     "require-dev": {
diff --git a/composer.json b/composer.json
@@ -13,7 +13,7 @@
         "php": "^8.2",
         "ext-intl": "*",
         "ext-mbstring": "*",
-        "laminas/laminas-escaper": "^2.17",
+        "laminas/laminas-escaper": "^2.18",
         "psr/log": "^3.0"
     },
     "require-dev": {
diff --git a/system/ThirdParty/Escaper/Escaper.php b/system/ThirdParty/Escaper/Escaper.php
@@ -247,7 +247,7 @@ public function escapeCss(string $string)
     protected function htmlAttrMatcher($matches)
     {
         $chr = $matches[0];
-        $ord = ord($chr);
+        $ord = ord($chr[0]);
 
         /**
          * The following replaces characters undefined in HTML with the

Original file line number	Diff line number	Diff line change
`@@ -247,7 +247,7 @@ public function escapeCss(string $string)`
`247`	`247`	`protected function htmlAttrMatcher($matches)`
`248`	`248`	`{`
`249`	`249`	`$chr = $matches[0];`
`250`		`- $ord = ord($chr);`
	`250`	`+ $ord = ord($chr[0]);`
`251`	`251`
`252`	`252`	`/**`
`253`	`253`	`* The following replaces characters undefined in HTML with the`