title: How to sanitize Java object with OWASP encoder?
body: <p>To escape from Cross-Site-Scripting attack i have to sanitize/validate java object that is coming from RequestBody. Can i make use of Encoder (from OWASP) to encode the entire java object. It seems that the Encoder will encode only the strings and cant accept objects. I have the similar issue many places wherein I should to handle this issue. </p>
  
  <p>Is there any way to do sanitize for whole object for avoiding cross site script issue?</p>