ejsf project with xss prevantion vulnerability