The problem of inconsistent output encodings often arises in web pages. If an encoding
is not specified in an HTTP header, web browsers often guess about which encoding is
being used. This can open up the browser to subtle XSS attacks.
With Struts, write all data from form beans with the bean's filter attribute set to true.