jeevan-patil

<bean id="dataSource" class="org.apache.tomcat.jdbc.pool.DataSource" destroy-method="close">
  <property name="driverClassName" value="${jdbc.driverClassName}" />
  <property name="url" value="${jdbc.url}" />
  <property name="username" value="${jdbc.username}" />
  <property name="password" value="${jdbc.password}" />
  <property name="initialSize" value="10"/>
  <property name="maxActive" value="50"/>
  <property name="maxIdle" value="10" />
  <property name="maxWait" value="100"/>
  <property name="name" value="Tomcat Connection Pool" />

jeevan-patil

<dependency>
  <groupId>org.apache.tomcat</groupId>
  <artifactId>tomcat-jdbc</artifactId>
  <version>7.0.79</version>
</dependency>

jeevan-patil

<filter>
	<filter-name>XSS</filter-name>
	<display-name>XSS</display-name>
	<description></description>
	<filter-class>com.filter.CrossScriptingFilter</filter-class>
</filter>

<filter-mapping>
	<filter-name>XSS</filter-name>
	<url-pattern>/*</url-pattern>

jeevan-patil

package com.filter;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;

import org.apache.log4j.Logger;

public final class RequestWrapper extends HttpServletRequestWrapper {
	private static Logger logger = Logger.getLogger(RequestWrapper.class);
	public RequestWrapper(HttpServletRequest servletRequest) {

jeevan-patil

package com.filter;

import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;

jeevan-patil

<form:input path="name" htmlEscape="true" />

jeevan-patil

<spring:htmlEscape defaultHtmlEscape="true" />

jeevan-patil

<context-param>
<param-name>defaultHtmlEscape</param-name>
<param-value>true</param-value>
</context-param>

jeevan-patil

<form id="personForm">
<input type="text" name="name" value="&quot;&gt;Hacker&lt;script&gt;alert(&quot;I am destroyer&quot;);&lt;/script&gt;"/>
<input type="submit" value="Submit">
</form>

jeevan-patil

<form:form id="personForm">
<form:input path="name" />
<input type="submit" value="Submit">
</form:form>