Bug Report: ComponentAttributeBag - trim() Error when Input Name is Changed to Array Format in Developer Tools

[ati7697]

I encountered an issue in the ComponentAttributeBag when manually changing the input field name format in developer tools. This scenario mimics a potential attack where a malicious user manipulates the input names to pass unexpected data types.

Steps to Reproduce

1. Create a custom input component

   <input {{ $attributes->merge(['type' => 'text']) }}/>

2. Use the component in a form :

   <x-input name="email" />

3. Open the form in the browser, inspect the email input field using the developer tools, and manually change the name attribute from email to email[].

4. Fill out the form and attempt to submit it.

The following error occurs:

error – trim(): Argument 1 ($string) must be of type string, array given

The error appears to stem from the ComponentAttributeBag class, which seems to be expecting the value to be a string rather than an array.

Environment

• Laravel Version: Laravel 11
• PHP Version: 8.3.12

Potential Fix

It would be helpful if the ComponentAttributeBag could check whether the input is an array before applying the trim() function.