title: Escape all strings in JSP/Spring MVC
body: <p>I display strings in my JSP this way:</p>
  
  <pre><code>${someString}
  </code></pre>
  
  <p>this string may, of course, contain special html characters. Currently it is possible to HTML-inject malicious code (eg. if someString is a javascript include - <code>&lt;script src...&gt;</code>).</p>
  
  <p><strong>How can I make sure that all strings are escaped before printing?</strong></p>
  
  <p>I am using Spring MVC and JSP.</p>