To prevent XSS attacks:

• Sanitize user inputs: Ensure that all user input is sanitized and encoded before being displayed on the web page.
• Use Content Security Policy (CSP): CSP helps prevent malicious JavaScript from executing by specifying trusted sources for scripts.
• Escape output: Always escape dynamic content before rendering it in HTML, JavaScript, or CSS.
• Use frameworks with built-in protection: Many modern frameworks like React automatically escape content by default to protect against XSS.