在freemarker spring中配置auto_escape -mvc应用程序

<bean id="viewResolver" class="org.springframework.web.servlet.view.freemarker.FreeMarkerViewResolver">
    <property name="cache" value="true"/>
    <property name="prefix" value="/WEB-INF/views/"/>
    <property name="suffix" value=".ftl"/>
    <property name="contentType" value="text/html;charset=UTF-8"/>
</bean>

<property name="auto_escape" value="true"/>

@RequestMapping("/example")
public ModelAndView example() {
    ModelAndView modelAndView = new ModelAndView("example");
    modelAndView.addObject("data", "<script>alert('XSS')</script>");
    return modelAndView;
}

<div>${data}</div>