currently I use org.apache.commons.lang.StringEscapeUtils escapeHtml() to escape unwanted HTML tags in my Strings but then I realized it escapes characters with
org.apache.commons.lang.StringEscapeUtils escapeHtml()
If it's for Android, use TextUtils.htmlEncode(String) instead.
TextUtils.htmlEncode(String)