title: How to fix XSS vulnerability in java jsp pages?
body: <p>I have below code to avoid xss-prevention</p>
  
  <p>Issues but seems it's not working</p>
  
  <pre><code>&lt;TD width="100%" class="InputColumn" colspan="2"&gt;
  &lt;TEXTAREA NAME="txt_name" ROWS="9" COLS="178"fld="ccom" onblur="javascript:trimInnerSpaces(this)"onchange="javascript:setccomSaveFlag();"&gt;&lt;%=ESAPI.encoder().encodeForHTML(StUpCom)%&gt;&lt;/TEXTAREA&gt;
  &lt;/TD&gt;
  </code></pre>