title: XSS Value in Input Tag
body: <p>I'm looking for some advice on securing my code from vulnerabilities. Below are two lines that I have questions about.</p>
  
  <pre><code>&lt;input type="hidden" name="criteria" value="" /&gt;
  &lt;input type="hidden" name="search" value="0" /&gt;
  </code></pre>
  
  <p>The code was scanned with IBM's App Scan and the results came back that the test was able to inject a script (XSS) into the parameter 'criteria' and 'search'. I found a few examples of this online (inside  tag), but didn't see a solid solution. Based on this information,what would be the easiest way to sanitize the values to prevent XSS?</p>