fix(security): add csrf filter + prevent xss attacks by escaping user input

- update CI4 to v4.1.9's stable production package
- update php and js dependencies to latest

app/Libraries/ViewComponents/ComponentRenderer.php

@@ -228,10 +228,10 @@ class ComponentRenderer
         if (! file_exists($filePath)) {
             return null;
         }
+
         $className = service('locator')
             ->getClassname($filePath);
 
-        /** @phpstan-ignore-next-line */
         if (! class_exists($className)) {
             return null;
         }
@@ -247,7 +247,6 @@ class ComponentRenderer
     private function renderView(string $view, array $data): string
     {
         return (function (string $view, $data): string {
-            /** @phpstan-ignore-next-line */
             extract($data);
             ob_start();
             eval('?>' . file_get_contents($view));