Hi Scott/ Opkar,Thanks for the reply. I have implemented the XSS api in JSP and in JAVA. I have issue in Javascript as well EX: window.document.referrer; whoul be validated for Client DOM XSS.What can be implemented here in JS file can you please suggest.Thanks,Ramya