Encode.forHtml in Java!

<%@page import="org.owasp.encoder.Encode"%>

...then later in code...

<% request.setAttribute("foo", Encode.forHtml(bar)); %>