title: Laravel validation doesn't validate html entities
body: <p>I'm working with Laravel 5.5 and I'm trying to make validation of a form which shouldn't pass if user write html entities, for example: <code>&lt;h1&gt;Hola&lt;/h1&gt;</code>, <code>&lt;script&gt;alert(1)&lt;/script&gt;</code>.
  But it insert all field in DB.</p>
  
  <p>My controller:</p>
  
  <pre><code>protected function storeForm(CaseRequest $request){
  try {
  $supportCase = new SupportCase;
  $supportCase-&gt;type = $request-&gt;input('type');
  // all fields of table[...]
  $supportCase-&gt;save();
  
  return view('steps/finish/success')-&gt;with(['message' =&gt; 'Form success']);
  } catch (Exception $e) {
            echo $e-&gt;getMessage();
            return view('steps/finish/error')-&gt;withErrors(['message' =&gt; 'Form error']);
        }
  }
  </code></pre>
  
  <p>My CaseRequest is this:</p>
  
  <pre><code> /**
       * Determine if the user is authorized to make this request.
       *
       * @return bool
       */
      public function authorize()
      {
          return true;
      }
  
      /**
       * Get the validation rules that apply to the request.
       *
       * @return array
       */
      public function rules()
      {
          return [
            'type' =&gt; 'required|min:3|max:3|string',
            'brand' =&gt; 'required|string',
            'product' =&gt; 'required|string',
            'order' =&gt; 'required|string',
            'description' =&gt; 'required|min:10|string',
            'sn' =&gt; 'nullable',
            'name' =&gt; 'required|min:2|string',
            'nin' =&gt; 'required|min:9|max:11|alpha_dash',
            'email' =&gt; 'required|email',
            'phone' =&gt; 'required|digits_between:7,12',
            'address' =&gt; 'required|min:5|string',
            'city' =&gt; 'required|min:2|string',
            'zip' =&gt; 'required|min:2|numeric',
            'state' =&gt; 'required|min:2|string',
            'country' =&gt; 'required|min:2|string',
          ];
      }
  </code></pre>
  
  <p>I have read the documentation and the Request is the first to be called, before than controller, and if this has any error it throw a error message. Doesn't it?.</p>
  
  <p>I'm using parsley and select2, at first it has a validation in frontend with parley, and it's working well, but if I remove parsley validation now Laravel should validate it, right? but in my DB it is saving all fields (included<code>&lt;script&gt;alert(1)&lt;/script&gt;</code>).</p>
  
  <pre><code>    &lt;div class="form" id="main-form" data-parsley-validate="data-parsley-validate"&gt;
          {!! Form::open(['id' =&gt; 'main-form', 'data-parsley-validate' =&gt; 'data-parsley-validate']) !!}
  
          &lt;div class="col-md-7 light-form"&gt;
              &lt;fieldset&gt;
                  {!! Form::label('contact', trans('frontend/steps.form.contact'), ['class' =&gt; 'upper']) !!}
                  {!! Form::label('name',  trans('frontend/steps.form.name')) !!}
                  {!! Form::text('name', old('name'), [
                                                      'data-parsley-pattern' =&gt; '[ÁÉÍÓÚáéíóúa-zA-Z ]+$',
                                                      'data-parsley-required' =&gt; 'true',
                                                      'data-parsley-minlength'=&gt;'2',
                                                      'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.name'),
                                                      'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.name'),
                                                      'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.name'),
  
                                                      ]) !!}
              &lt;/fieldset&gt;
              &lt;fieldset&gt;
                  {!! Form::label('nin',  trans('frontend/steps.form.in')) !!}
                  {!! Form::text('nin', old('nin'), [
                                                    'data-parsley-type'=&gt;'alphanum',
                                                    'data-parsley-required' =&gt; 'true',
                                                    'data-parsley-minlength'=&gt;'9',
                                                    'data-parsley-maxlength'=&gt;'11',
                                                    'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.in'),
                                                    'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.in'),
                                                    'data-parsley-maxlength-message' =&gt; trans('frontend/steps.form-errors.in')
                                                    ]) !!}
              &lt;/fieldset&gt;
              &lt;fieldset&gt;
                  {!! Form::label('phone',  trans('frontend/steps.form.telf')) !!}
                  {!! Form::text('phone', old('phone'), [
                  'data-parsley-pattern' =&gt; '\d+$',
                                                    'data-parsley-required' =&gt; 'true',
                                                    'data-parsley-minlength'=&gt;'7',
                                                    'data-parsley-maxlength'=&gt;'12',
                                                    'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.telf'),
                                                    'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.telf'),
                                                    'data-parsley-maxlength-message' =&gt; trans('frontend/steps.form-errors.telf'),
                                                    'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.telf')
                                                    ]) !!}
              &lt;/fieldset&gt;
              &lt;fieldset&gt;
                  {!! Form::label('address',  trans('frontend/steps.form.address')) !!}
                  {!! Form::text('address', old('address'), [
                          'data-parsley-pattern' =&gt; '^[ÁÉÍÓÚáéíóúa-zA-Z0-9-_ ]+$',
                          'data-parsley-required' =&gt; 'true',
                          'data-parsley-minlength'=&gt;'5',
                          'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.address'),
                          'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.address'),
                          'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.address'),
  
                                                    ]) !!}
              &lt;/fieldset&gt;
  
              &lt;div class="col-md-12 no-padding"&gt;
                  &lt;div class="col-md-6 location-form"&gt;
                      &lt;fieldset&gt;
                          {!! Form::label('address',  trans('frontend/steps.form.city')) !!}
                          {!! Form::text('city', old('city'), [
                                                            'data-parsley-required' =&gt; 'true',
                                                            'data-parsley-minlength'=&gt;'2',
                                                            'data-parsley-pattern' =&gt; '[ÁÉÍÓÚáéíóúa-zA-Z ]+$',
                                                            'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.city'),
                                                            'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.city'),
                                                            'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.city'),
                                                            ]) !!}
                      &lt;/fieldset&gt;
                      &lt;fieldset&gt;
                          {!! Form::label('zip',  trans('frontend/steps.form.zip')) !!}
                          {!! Form::text('zip', old('zip'), [
                                                            'data-parsley-required' =&gt; 'true',
                                                            'data-parsley-minlength'=&gt;'2',
                                                            'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.zip'),
                                                            'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.zip')
                                                            ]) !!}
                      &lt;/fieldset&gt;
                  &lt;/div&gt;
                  &lt;div class="col-md-6 no-padding"&gt;
                      &lt;fieldset&gt;
                          {!! Form::label('state',  trans('frontend/steps.form.state')) !!}
                          {!! Form::text('state', old('state'), [
                                                            'data-parsley-pattern' =&gt; '[ÁÉÍÓÚáéíóúa-zA-Z ]+$',
                                                            'data-parsley-required' =&gt; 'true',
                                                            'data-parsley-minlength'=&gt;'2',
                                                            'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.state'),
                                                            'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.state'),
                                                            'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.state'),
                                                            ]) !!}
                      &lt;/fieldset&gt;
                      &lt;fieldset&gt;
                          {!! Form::label('country',  trans('frontend/steps.form.country')) !!}
                          {!! Form::text('country', old('country'), [
                                                            'data-parsley-required' =&gt; 'true',
                                                            'data-parsley-pattern' =&gt; '[ÁÉÍÓÚáéíóúa-zA-Z ]+$',
                                                            'data-parsley-minlength'=&gt;'2',
                                                            'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.country'),
                                                            'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.country'),
                                                            'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.country'),
                                                            ]) !!}
                      &lt;/fieldset&gt;
                  &lt;/div&gt;
              &lt;/div&gt;
  
          &lt;/div&gt;
          &lt;div class="col-md-5 dark-form"&gt;
              &lt;fieldset&gt;
                  {!! Form::label('order', trans('frontend/steps.form.order'), ['class' =&gt; 'upper']) !!}
                  {!! Form::text('order', old('order'), [
                                                    'placeholder' =&gt; '123567',
                                                    'data-parsley-type' =&gt; 'digits',
                                                    'data-parsley-type-message' =&gt; trans('frontend/steps.form-errors.order_format'),
                                                    'data-parsley-required' =&gt; 'true',
                                                    'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.order')
                                                    ]) !!}
                  &lt;span class="loading style-2"&gt;&lt;/span&gt;
              &lt;/fieldset&gt;
              &lt;fieldset id="brand-wrap"&gt;
                  &lt;label class="upper" for="brand"&gt;
                      {!!  trans('frontend/steps.form.brand') !!}
                      &lt;img class="tip" title="{!! trans('frontend/steps.form.brand_tooltip') !!}"
                           src="{!! asset('assets/img/frontend/icons/info.png') !!}"/&gt;
                  &lt;/label&gt;
                  {!! Form::select('brand', $layout-&gt;brands-&gt;pluck('name', 'id'), old('brand'), [
                                                                                                  'id'=&gt; 'brand',
                                                                                                  'class' =&gt; 'select2',
                                                                                                  'data-parsley-required' =&gt; 'true',
                                                                                                  'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.brand')
                                                                                                  ])
                                                                                            !!}
                  &lt;span class="loading style-2"&gt;&lt;/span&gt;
              &lt;/fieldset&gt;
              &lt;fieldset id="product-wrap"&gt;
                  {!! Form::label('product', trans('frontend/steps.form.product'), ['class' =&gt; 'upper']) !!}
                  {!! Form::select('product', ['null' =&gt; 'null'], old('product'), [
                                                                                  'id'=&gt; 'product_select',
                                                                                  'class' =&gt; 'select2',
                                                                                  'data-parsley-required' =&gt; 'true',
                                                                                  'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.product')
                                                                                  ])
                                                                            !!}
              &lt;/fieldset&gt;
              &lt;fieldset&gt;
                  {!! Form::label('description', trans('frontend/steps.form.problem'), ['class' =&gt; 'upper']) !!}
                  {!! Form::textarea('description', old('description'), [
                                                  'data-parsley-pattern' =&gt; '[áéíóúÁÉÍÓÚäëïöüÄËÏÖÜa-zA-Z0-9-_ ]+$',
                                                  'data-parsley-minlength'=&gt;'10',
                                                  'data-parsley-required' =&gt; 'true',
                                                  'data-parsley-type-message' =&gt; trans('frontend/steps.form-errors.problem'),
                                                  'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.problem'),
                                                  'data-parsley-minlength-message' =&gt; trans('frontend/steps.form-errors.problem'),
                                                  'data-parsley-pattern-message' =&gt; trans('frontend/steps.form-errors.problem')
                                                    ]) !!}
              &lt;/fieldset&gt;
              &lt;fieldset id="serial-wrap"&gt;
                  {!! Form::label('sn', trans('frontend/steps.form.serial')) !!}
                  {!! Form::text('sn', old('sn'), [
                                                  'id' =&gt; 'sn',
                                                  'data-parsley-required' =&gt; 'false',
                                                  'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.imei'),
                                                  'data-parsley-lunhvalidator' =&gt; '15',
                                                  'data-parsley-lunhvalidator-message' =&gt; trans('frontend/steps.form-errors.invalid-imei')
                                                  ])
                                              !!}
              &lt;/fieldset&gt;
              &lt;fieldset&gt;
                  {!! Form::label('email',  trans('frontend/steps.form.email')) !!}
                  {!! Form::email('email', old('email'), [
                                                    'data-parsley-type'=&gt; 'email',
                                                    'data-parsley-required' =&gt; 'true',
                                                    'data-parsley-type-message' =&gt; trans('frontend/steps.form-errors.email'),
                                                    'data-parsley-required-message' =&gt; trans('frontend/steps.form-errors.email')
                                                    ]) !!}
              &lt;/fieldset&gt;
  
              @if($case == "INC")
                  &lt;button class="upper" type="button" onclick="nextStep(this)" data-type="FORM" data-field="transaction"
                          data-next="eleventh" data-case="{!! $case !!}"
                          data-value=""&gt;{!! trans('frontend/steps.form.continue') !!}&lt;/button&gt;
              @else
                  &lt;button class="upper" type="button" onclick="nextStep(this)" data-type="FORM" data-field="transaction"
                          data-next="fifth" data-case="{!! $case !!}"
                          data-value=""&gt;{!! trans('frontend/steps.form.continue') !!}&lt;/button&gt;
              @endif
          &lt;/div&gt;
          {!! Form::close() !!}
      &lt;/div&gt;
  
  </code></pre>