Added the Esapi code into the XSSUtils.

Added the Esapi code into the XSSUtils, removed the
ESAPI.encoder().encodeForHTML call in models.