title: Fortify issue sends unvalidated data to a web browser
body: <p>I am creating response as below:</p>
  
  <pre><code>    @Override
      public Response post(String html,String headers) {
          HttpEntity&lt;String&gt; requestPayload = new HttpEntity&lt;String&gt;(html,headers);
          ResponseEntity&lt;String&gt; responseEntity = null;
          responseEntity = restTemplate.postForEntity(uri, requestPayload,String.class);
          String responseString = responseEntity.getBody().toString();
          return Response.ok().entity(responseString).build();
      }
  </code></pre>
  
  <p>Fortify is complaining </p>
  
  <p>The method sends unvalidated data to a web browser on line xx, which can result in the browser executing malicious code.</p>
  
  <p>Any idea how can I fix this?</p>