Example Concept: Cross-site scripting (XSS) is a vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. To mitigate XSS, use input validation to restrict input to expected formats, output encoding to safely render user data, and security headers like Content-Security-Policy to control resources the browser is allowed to load.