diff --git a/src/ControlStructure/BlockToken.php b/src/ControlStructure/BlockToken.php
index 05c828d..773f3d9 100644
--- a/src/ControlStructure/BlockToken.php
+++ b/src/ControlStructure/BlockToken.php
@@ -31,6 +31,8 @@ class BlockToken implements ControlStructure {
                 return "<?php echo \$___block->render(\$___class__template); unset(\$___block); ?>";
 
             case "arguments":
+                $cleanArguments = htmlspecialchars($arguments);
+
                 return <<<PHP
                     <?php 
                         try {
@@ -42,7 +44,7 @@ class BlockToken implements ControlStructure {
                             \$showArgs = fn(\$e) => (\$type = gettype(\$e)) === 'object' ? \$e::class : \$type;
                             
                             throw new \Exception(
-                                sprintf('A block awaiting arguments (%s) instead received (%s) with values (%s)', '$arguments', implode(', ', array_map(\$showArgs, \$inlineVariables ?? [])), json_encode(\$inlineVariables))
+                                sprintf('A block awaiting arguments (%s) instead received (%s) with values (%s)', '$cleanArguments', implode(', ', array_map(\$showArgs, \$inlineVariables ?? [])), json_encode(\$inlineVariables))
                             );
                         }
                     /*%EXCEPTION_LINE_BASE%*/?>