Merge branch '5.x' into 6.x

# Conflicts:
#	CHANGELOG.md

Author: jasonvarga

src/Facades/Endpoint/Parse.php

@@ -109,6 +109,10 @@ public function config($value)
         return preg_replace_callback('/\{\{\s*config[\.:]([\w\.\:]+)\s*\}\}/', function ($matches) {
             $key = str_replace(':', '.', $matches[1]);
 
+            if (strtolower($key) === 'app.key') {
+                return '';
+            }
+
             return config($key, '');
         }, $value);
     }

tests/Facades/ParseTest.php

@@ -67,4 +67,18 @@ public static function configPlaceholdersDataProvider(): array
             'null passthrough' => [null, null],
         ];
     }
+
+    #[Test]
+    public function app_key_is_banned_from_config_parsing()
+    {
+        config([
+            'app.key' => 'secret',
+            'foo.bar' => 'baz',
+        ]);
+
+        $this->assertSame('', Parse::config('{{ config:app:key }}'));
+        $this->assertSame('', Parse::config('{{ config.app.key }}'));
+        $this->assertSame('', Parse::config('{{ config.app:key }}'));
+        $this->assertSame('prefix  baz suffix', Parse::config('prefix {{ config:app:key }} {{ config:foo:bar }} suffix'));
+    }
 }