How can I fix this? this is my first full stack app I've built and it's nice seeing users interact with the site
Edit: this focuses on script tags and other means to inject code, but most defenses also work for other injected tags
first time figuring out opsec !