hi all
the testing people has scanned the application i.e.,,(machine test) and found  that The test successfully embedded a script in the response, and it will be executed once the page is
loaded in the user's browser. This means that the application is vulnerable to Cross-Site Scripting and they told us to Filter out hazardous characters from user input and iam unable to find a solution any help woul be kindly appreciated..