StringBuffer sql = new StringBuffer("select key_sn,remark,create_date from tb_selogon_key where 1=1 ");
		if(!CommUtil.isEmpty(keyWord)){
			sql.append(" and like '%" + StringEscapeUtils.escapeSql(keyWord) + "%'");
		}

System.out.println(StringEscapeUtils.escapeHtml("<a>dddd</a>"));   
輸出結果為：<a>dddd</a>
 

System.out.println(StringEscapeUtils.unescapeHtml("<a>dddd</a>"));   
輸出為：<a>ddd</a>

System.out.println(StringEscapeUtils.escapeJavaScript("<script>alert('1111')</script>"));   
輸出為：<script>alert('111')</script>

System.out.println(StringEscapeUtils.escapeJava("中國"));   
輸出為：用escapeJava方法轉義之後的字串為:/u4E2D/u56FD/u5171/u4EA7/u515A
 

public static String unicode2String(String unicode) {
        StringBuffer string = new StringBuffer();
        String[] hex = unicode.split("\\\\u");
        for (int i = 1; i < hex.length; i++) {
            // 轉換出每一個程式碼點
            int data = Integer.parseInt(hex[i], 16);
            // 追加成string
            string.append((char) data);
        }
        return string.toString();
    }
 

public static String convert(String utfString){
        StringBuilder sb = new StringBuilder();
        int i = -1;
        int pos = 0;

        while((i=utfString.indexOf("\\u", pos)) != -1){
            sb.append(utfString.substring(pos, i));
            if(i+5 < utfString.length()){
                pos = i+6;
                sb.append((char)Integer.parseInt(utfString.substring(i+2, i+6), 16));
            }
        }
        return sb.toString();
    }

System.out.println("\u7f8e");