title: Solve it using OWASP and ESAPI
body: <p>Attack Vector: java.io.PrintWriter.write</p>
  
  <p>Description: This call to java.io.PrintWriter.write() contains a cross-site scripting (XSS) flaw. The application populates the HTTP response with user-supplied input, allowing an attacker to embed malicious content, such as Javascript code, which will be executed in the context of the victim's browser. XSS vulnerabilities are commonly exploited to steal or manipulate cookies, modify presentation of content, and compromise confidential information, with new attack vectors being discovered on a regular basis. The first argument to write() contains tainted data. The tainted data originated from an earlier call to javax.servlet.servletrequest.getparameter. The tainted data is directed into an output stream returned by org.apache.jasper.runtime.pagecontextimpl.getout.</p>
  
  <p>It is in the code  first argument of writer.write(arg1) .. pls help me regarding this</p>