Java / Security : Cross Site Scripting (XSS) and SQL injectionJava / Security : Cross Site Scripting (XSS) and SQL injection