JSTL escaping special characters [duplicate]
问题 This question already has an answer here: XSS prevention in JSP/Servlet web application 9 answers I have this weird issue with special characters. In JSP, I am using field name as id and the name can be anything like id="<1 and &>2" (OR) id="aaa & bbb" I don't have any other option to use ID's other than names, that what the only thing I get from backend. So, Is there any logic to remove all the special characters using JSTL. With the present scenario, In JS I will do some operations with