java在spring MVC应用程序中防止XSS攻击

Question

在out spring MVC应用程序中面临XSS攻击。下面是发起攻击的示例输入

src="-confirm(document.domain)%2B"
utm_size="-confirm(document.domain)%2B"
acct="-confirm(document.domain)%2B"

ex: www.abc.com?src="-confirm(document.domain)%2B"

With above in the request giving the alert popup. Can you help me to handle it. Any help is appreciated on this.

谢谢——， 西亚马拉