How can I prevent cross-site scripting attacks on my web application?

Example Concept: Cross-site scripting (XSS) is a vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. To mitigate XSS, use security headers like Content-Security-Policy to restrict the sources of executable scripts, and ensure all user inputs are properly sanitized and encoded before rendering them in the browser.