https://kodejava.org/how-to-disable-scripting-elements-in-jsp-pages/