By implementing a Content Security Policy, you can use browser features to mitigate many cross-site scripting attacks.