title: XSS attack in URL
body: <p>I have spring application. I have read about XSS attach
  And I globally disabled by the answer here 
  <a href="https://stackoverflow.com/questions/2147958/how-do-i-prevent-people-from-doing-xss-in-java">How do I prevent people from doing XSS in Spring MVC?</a></p>
  
  <p>(I put the context-param in web.xml)</p>
  
  <p>But still I do able to do xss attack in URL by giving the script in URL</p>
  
  <p><a href="https://localhost/sam/pop/viewProfile?id=/%3E%3Cscript%3Ealert%28123%29%3C/script%3E" rel="nofollow noreferrer">https://localhost/sam/pop/viewProfile?id=/%3E%3Cscript%3Ealert%28123%29%3C/script%3E</a></p>
  
  <p>How to solve this?</p>