@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,
     ServletException {

  try {
     chain.doFilter(new XSSRequestWrapper((HttpServletRequest) request), response);
  } catch (XssAttackException e) {
     request.getRequestDispatcher("/XssAttack").forward(request, response);
  }
}

public class XssAttackException extends RuntimeException {

private static final long serialVersionUID = 1L;

}