36. What is XSS? How to prevent it?

Two common security problem in Web Front End, one is CSRF, the other one is XSS.

Other than sanitizing, mentioning CSP header would shine you out.

This article explains clearly on this issue in case you forgot.