In case you have xpages applications open in the web the chances are that someone, someday, somehow wants to act malicious. Of course we don't want that so besides on the infrastructure site you also should add protection on the application side. Especially applications with input fields (text, text area, radiobuttons etc) are vulnerable for exploitation. Tools like Burp suite do not make this a tedious task. So how can we protect us from malicious data-entry?
This is a companion discussion topic for the original entry at https://quintessens.wordpress.com/2026/07/30/sanitize-xpages-input-fields/