From 7f46d5872b0324493c28ecc8d848c182e88f30e0 Mon Sep 17 00:00:00 2001 From: Tushar Nain Date: Tue, 7 Oct 2025 17:23:11 +0530 Subject: [PATCH] fix: replace unsafe eval() with Blade::render() in compileBlade --- src/Utilities/Helper.php | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/src/Utilities/Helper.php b/src/Utilities/Helper.php index a859f17d..b0e87127 100644 --- a/src/Utilities/Helper.php +++ b/src/Utilities/Helper.php @@ -6,6 +6,7 @@ use DateTime; use Illuminate\Contracts\Support\Arrayable; use Illuminate\Support\Arr; +use Illuminate\Support\Facades\Blade; use Illuminate\Support\Str; use ReflectionFunction; use ReflectionMethod; @@ -124,12 +125,7 @@ public static function compileBlade(string $str, array $data = []): false|string return view($str, $data)->render(); } - ob_start() && extract($data, EXTR_SKIP); - eval('?>'.app('blade.compiler')->compileString($str)); - $str = ob_get_contents(); - ob_end_clean(); - - return $str; + return Blade::render($str, $data); } /**