Browsing: cross site scripting prevention in spring mvc