title: Fortify Cross Site Scripting: Poor Validation
body: <p>I have used JSTL  tag to fix the XSS vulnerability issue Fortify reported on my JSP's. But After using  though the XSS vulnerability issue was resolved, it resulted in a new issue as 'XSS: Poor Validation'. What are the other possible solutions I could implement to resove this poor validation issue?</p>
  
  <p>Fortify suggests HTML/ XML/ URL encoding is not a good practise as the code will be decoded during runtime, which could still result in the XSS attack.</p>
  
  <p>I am using struts framework injected with spring. I have fields where user can provide input as well as fields that are read from the database. I ve searched for possible solutions but havent had any luck in finding one yet.</p>
  
  <p>Thanks,
  Deena</p>