title: How do I prevent people from doing XSS in Spring MVC?
body: <p>What should I do to prevent XSS in Spring MVC? Right now I am just putting all places where I output user text into JSTL <code>&lt;c:out&gt;</code> tags or <code>fn:escapeXml()</code> functions, but this seems error prone as I might miss a place.</p>
  
  <p>Is there an easy systematic way to prevent this? Maybe like a filter or something? I'm collecting input by specifying <code>@RequestParam</code> parameters on my controller methods. </p>