title: How to escape values from HTML attribute inside jsp to avoid XSS attack?
body: <p>Inside a jsp page, I have a input value attribute which is filled this way:</p>
  
  <pre><code>value="${param.name}"
  </code></pre>
  
  <p>It is vulnerable to a XSS attack if someone manage to put something</p>
  
  <pre><code>"&gt;&lt;script&gt;doEvil();&lt;/script&gt;
  </code></pre>
  
  <p>How do I properly escape the value of param.name to fix the vulnerability ?</p>