Preventing Cross Site Scripting

[Qaurk Noble]

Hello

Can anyone help?

I am new to java and have picked up a JSP project to ensure that non of
user's captured data can be parsed by a browser and that they are relatevely
free of code injections before storing them to a persistent storage.

In ASP I could easily do this by using Server.HTMLEncode() method.
How do I do the equilalent in JSP? Or putting it a differnt way, how can I
html encode as well as decode a piece of data in JSP?

Thanks in advance