Spring web app tutorial 35: Cross Site Scripting - XSS