防止Cross-site scripting (XSS)

public String filter(String url) {
		String sanitized = url;
		sanitized = sanitized.replaceAll("<", "<").replaceAll(">", ">");
		sanitized = sanitized.replaceAll("\\(", "(").replaceAll("\\)", ")");
		sanitized = sanitized.replaceAll("'", "'");
		sanitized = sanitized.replaceAll("eval\\((.*)\\)", "");
		sanitized = sanitized.replaceAll("[\\\"\\\'][\\s]*javascript:(.*)[\\\"\\\']", "\"\"");
		return sanitized;
	}