Map<String, String[]> map = req.getParameterMap();
for(String key : map.keySet()){
String values[] = map.get(key);
for( int i=0 ;i<values.length;i++){
values[i] = StringEscapeUtils.escapeEcmaScript(values[i]);
values[i] = StringEscapeUtils.escapeJava( values[i]);
values[i] = StringEscapeUtils.escapeJson(values[i]);
values[i] = StringEscapeUtils.escapeHtml3(values[i]);
values[i] = StringEscapeUtils.escapeHtml4(values[i]);
values[i] = StringUtils.replace(values[i], "(","");
values[i] = StringUtils.replace(values[i], ")","");
values[i] = StringUtils.replace(values[i], "<","");
values[i] = StringUtils.replace(values[i], ">","");
values[i] = StringUtils.replace(values[i], "'","");
values[i] = StringUtils.replace(values[i], ";","");
//values[i] = StringUtils.replace(values[i], "%","");
//values[i] = StringUtils.replace(values[i], "&","");
}
}