Sanitize Your Inputs

XSS happens when malicious scripts are injected into trusted websites.

DevSecOps Approach:

1. Content Security Policy (CSP): Configure headers in your YAML/Nginx config to restrict where scripts can be loaded from.
2. SAST: Use Semgrep to find places where user input is rendered without escaping.