How to handle form data on server, injection?

Question

Laravel

All with the upcoming!
I can insert a script into the feedback form and it will be released in the same form in orders, it turns out that you can make all sorts of injections
. How can I protect myself from this and how are they protected?
I know that you can use something like this in the output

{!! html_entity_decode(nl2br(e($m->description))) !!}

but is it safe? Do I need to insert special characters before entering into the database?

Answer 1

Write to the database as is, output with screening (any templating engine or frontend frame has it out of the box). In the case of blade it's {{ }}, why the hell are you using {!! !!} I do not understand.