spring-projects/spring-framework — pull request #604 by hangsublim (2014-07-29 02:38:58+00:00)
Title: add testNullSafeToStringWithXSSValue testcase to objectUtilsTests

In the absence of a message string for the error code, this is the message that gets written as the error.
So ObjectUtils class, nullSafeToString method parameter can contains XSS attack script value.
So I added convertXSSValue method and testCase.

When the vaule contains script then the method converting the value safe.