title: Getting XSS detected in my project
body: <p>XSS is getting detected in my code.</p>
  
  <pre><code>String ref = new CellReference(rownum, columnIndex).formatAsString();
  _out.write(ref);
  </code></pre>
  
  <p>it detects at this line.</p>
  
  <p>I have been using Appscan. Tried this:</p>
  
  <pre><code>String ref = ESAPI.encoder()
      .encodeForHTMLAttribute(new CellReference(rownum, columnIndex)
      .formatAsString());
  _out.write(ref);`
  </code></pre>
  
  <p>However, it did not work. Please help me to remedy this XSS finding.</p>