<!-- BEGIN COPY / PASTE -->
        function sanitizeInput(input) {
            const element = document.createElement('div');
            element.innerText = input;
            return element.innerHTML;
        }

        const userInput = "<script>alert('XSS');</script>";
        const safeInput = sanitizeInput(userInput);
        console.log(safeInput); // Outputs: &lt;script&gt;alert('XSS');&lt;/script&gt;
        <!-- END COPY / PASTE -->