title: Fix cross site scripting issue
body: <p>I have got a cross site scripting issue (reported by one of the tools)
  I have a form on my screen with various fields.
  Now if the user enters <code>&lt;script&gt;alert("1")&lt;/script&gt;</code> tag for one of the field 1, browser is showing popup with value 1.</p>
  
  <p>If user enters <code>&lt;html&gt;testString&lt;/html&gt; or &lt;script&gt;alert("1")&lt;/script&gt;</code> for field 1, it is being sent as encoded to server and retrieved back as encoded properly, but if the user does not modify field 1 containing these tags, but updates other fields like field 2, 3, field 1 is being messed up as it is being sent to server non encoded.</p>
  
  <p>How can I fix this issue? Is there any standard way of fixing such issues ?</p>
  
  <p>Also I use a Java resource where the form values are posted? So any changes to the same as well ?</p>