Cross-site Scripting/XSS Support

[rappa]

Is there a good solution for foiling Cross-site Scripting attacks with Spring MVC/Web flow? My understanding is that in order to defeat XSS attacks, it is necessary to HTML-escape all request parameter input, prior to displaying in the browser. Is there a good mechanism (e.g. interceptor) to HTML-escape input prior to binding to the command object? I would like to implement the minimal configuration which applies this solution to the entire web app. Thanks

[buntyindia]

I found a solution for XSS Cross site scripting here in this article http://www.techcrony.info/?p=41