参看 https://owasp.org/www-project-java-encoder/中的Legacy Servlet Spec部分

参看 https://wiki.owasp.org/index.php/Category:OWASP_AntiSamy_Project#tab=How_do_I_get_started_3F