xss过滤

   private String xssEncode(String value) {
            if (value == null || value.isEmpty()) {
                return value;
            }
            value = value.replaceAll("eval\\((.*)\\)", "");
            value = value.replaceAll("[\\\"\\\'][\\s]*javascript:(.*)[\\\"\\\']", "\"\"");
            value = value.replaceAll("<script", "&lt;script").replaceAll("script>", "script&gt;");
            return value;
        }