在Java Web应用程序中防止SQL注入攻击和XSS的方法

I'm writing a java class which would be invoked by a servlet filter and which checks for injection attack attempts and XSS for a java web application based on Struts. The InjectionAttackChecker class uses regex & java.util.regex.Pattern class to validate the input against the patterns specified in regex.I'm writing a java class which would be invoked