class XssHttpServletRequestWrapper extends HttpServletRequestWrapper {
/**
* request */ public XssHttpServletRequestWrapper(HttpServletRequest request) { super(request); }public String[] getParameterValues(String name) { String[] values = super.getParameterValues(name); if (values != null) { int length = values.length; String[] escapseValues = new String[length]; for (int i = 0; i < length; i++) { escapseValues[i] = HtmlUtils.htmlEscape(values[i]); } return escapseValues; } return super.getParameterValues(name); } }