Apache Tomcat hello.jsp XSS