XSS isn't dead - your website just thinks it is

XSS isn't dead - your website just thinks it is.
I typed <script>alert("XSS")</script>
The server smiled.
The browser screamed.
The developer cried.
The hacker... smiled back.

Cross-Site Scripting still haunts 1000s of sites.
Inputs are not filters.
Outputs are not safe.
Security is not optional.
Fix your code before someone else fixes your reputation.