java - Scripts/tags getting removed in text when using antisamy.jar/xml -


i using antisamy.xml , antisamy.jar preventing xss. when enter script tag in text box truncates , other text apart tag stored in database.

i want store script/tag in database too, without applying script/tag.

for example, if enter alert(); in text box on jsp page. want whole thing saved in db should not alert on ui.


Comments