How to stop xss payload?

Support
1 
<script>alert(‘XSS’)< /script>

these gets gets stored in database. how to deal with these?

2

Do a sanatize the content before output