how to resolve content spoofing ? if i added ?actionMessages="someString" it will display on jsp page plz provide some solutions

url:- htttp://localhost:8080/projName/CreateUser.action?actionMessages="HI" if i press Enter then Hi print on the JSP.

enter image description here