XSS(Cross-site scripting) 특수문자 치환

public class XssFilter {
	public static String XssReplace(String param) {
		
		param = param.replaceAll("&", "&");
		param = param.replaceAll("\"", """);
		param = param.replaceAll("'", "'");
		param = param.replaceAll("<", "&lt;");
		param = param.replaceAll(">", "&gt;");
		param = param.replaceAll("\r", "<br>");
		param = param.replaceAll("\n", "<p>");

		return param;
	}
}