Stronger Anti Cross-Site Scripting (XSS) Filter for Java Web Apps
Updated: 2012-03-31 05:50:22
Here is a good and simple anti cross-site scripting (XSS) filter
written for Java web applications. What it basically does is remove all
suspicious strings from request parameters before returning them to the
application. It’s an improvement over my previous post on the topic.
You should configure it as the first filter in your chain (web.xml)
and it’s generally a good idea to let it...