DomainObjectUtil.java activities.jsp xss fix