update

src/MicroweberPackages/App/Http/Middleware/XSS.php

@@ -18,6 +18,8 @@ public function handle(Request $request, Closure $next)
             array_walk_recursive($input, function (&$input) use ($clean) {
                 if (is_string($input)) {
                     $input = $clean->clean($input);
+                    // clean also blade curly braces
+                    $input = str_replace(['{{', '}}'], ['{{', '}}'], $input);
                 }
             });
         }