when user hits my url on browser like this
http://example.com/>"<script>alert(1212)</script>
this triggers the javascript i want to escape/remove/replace the special characters so that i will not triggers javascript
and second thing
"if you need to filter to just parameter names containing special chars filter using "next"."
i didn't get this can you please explain?