What are some effective ways to prevent cross-site scripting attacks on a web application?

Example Concept: Cross-site scripting (XSS) is a vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. To mitigate XSS, use output encoding to escape user input before rendering it in the browser. Implement security headers like Content-Security-Policy to restrict the sources from which scripts can be executed.