Do not escape $css() with escapeHtmlAttr() but escapeHtml()

Author: jissereitsma

view/base/templates/component/modal/close-button.phtml

@@ -16,7 +16,7 @@ $label = $block->getLabel();
 ?>
 <button
     @click="toggleModal"
-    class="<?= $escaper->escapeHtmlAttr($css('btn btn-primary mt-4', '')) ?>"
+    class="<?= $escaper->escapeHtml($css('btn btn-primary mt-4', '')) ?>"
 >
     <span><?= $escaper->escapeHtml($label) ?></span>
 </button>

view/base/templates/component/modal/close.phtml

@@ -18,5 +18,5 @@ use Magento\Framework\View\Element\Template;
 <button
     aria-label="<?= $escaper->escapeHtml(__('Close')) ?>"
     @click.prevent="toggleModal"
-    class="<?= $escaper->escapeHtmlAttr($css('float-right cursor-pointer')) ?>"
+    class="<?= $escaper->escapeHtml($css('float-right cursor-pointer')) ?>"
 ><?= /* @noEscape */ $imageRenderer->icon($block, 'xmark') ?></button>

view/base/templates/utils/local-messages.phtml

@@ -12,7 +12,7 @@ use Loki\CssUtils\Util\CssClass;
 ?>
 <template x-if="hasLocalMessages">
     <ul
-        class="loki-components-messages <?= $escaper->escapeHtmlAttr($css('')) ?>"
+        class="loki-components-messages <?= $escaper->escapeHtml($css('')) ?>"
         id="<?= $escaper->escapeHtml($block->getDomId()) ?>">
         <template x-for="message in messages">
             <li :class="message.type" x-html="message.text"></li>