Java : XSS due to insufficient validation