Pre-check contextual link ("contextual_links()" format

As the current implementation in twig_tweak is quite simple (render array), we'd have to duplicate some of the logic to explode $id by "|" and ":" so it's to be discussed, if it wouldn't be even better to add that check to core to safeguard the render array in general, even if used somewhere else.

Current twig_tweak implementation:

  /**
   * Builds contextual links.
   *
   * @param string $id
   *   A serialized representation of a #contextual_links property value array.
   *
   * @return array
   *   A renderable array representing contextual links.
   *
   * @see https://www.drupal.org/node/2133283
   */
  public static function drupalContextualLinks(string $id): array {
    $build['#cache']['contexts'] = ['user.permissions'];
    if (\Drupal::currentUser()->hasPermission('access contextual links')) {
      $build['#type'] = 'contextual_links_placeholder';
      $build['#id'] = $id;
    }
    return $build;
  }

Okay this works, but it would be great to track this down to the twig code / file where this is wrong. Any chance for that? Ideas?

Let's better fix this in core: 📌 Validate string given to _contextual_id_to_links() Active so not only twig_tweak benefits from the improved validation or handling.