특수문자 치환 (xss방지)

public static String translate(String str) {
StringBuffer buf = new StringBuffer();
char[] c = str.toCharArray();
int len = c.length;
for (int i=0 ; i < len ; i++) {
if      ( c[i] == '&' ) buf.append("&");
else if ( c[i] == '<' ) buf.append("<");
else if ( c[i] == '>' ) buf.append(">");
else if ( c[i] == '"' ) buf.append(""");
else if ( c[i] == '\'') buf.append("'");
else if ( c[i] == '\'') buf.append("&"");
        else buf.append(c[i]);
    }
    return buf.toString();
}