How can I prevent cross-site scripting security attacks effectively?

Example Concept: Cross-site scripting (XSS) is a security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. To mitigate XSS, use input validation to ensure only expected data is processed, output encoding to neutralize potentially harmful characters, and security headers such as Content-Security-Policy to restrict the sources of executable scripts.