How to use Cypress Intercept to Stub API Responses

For performing Security testing using Cypress we can do Cross -site
scripting testing by which we can simulate user inputs and check if they are
getting sanitised for preventing XSS vulnerabilities below is the code
snippet which is showing an example for implementing.
// Example: Testing for XSS
cy.visit('https://gift.com');
cy.get('#inputField').type('<script>alert("XSS");</script>');
cy.get('#submitButton').click();
cy.get('#outputDiv').should('not.contain', '<script>');
Another way of performing security testing is request intercept, by which
while intercepting requests and responses we can perform checks for
security headers, response code and other information which can impact
security. Below is the example code for doing this.
// Example: Intercepting and checking response headers
cy.intercept('GET', '/api/sensitive-data').as('sensitiveData');
cy.visit('https://gift.com');
cy.wait('@sensitiveData').its('response.headers').should('include',
'X-Content-Type-Options');
For performing Performance testing intercept is a very useful tool, we can
use below techniques for doing that.
By using Network Throttling, we can simulate various network conditions
such as slow connections, delayed responses and check how an
application is behaving under these conditions and design multiple
scenarios around it.