<?xml version="1.0" encoding="UTF-8" ?><taglib xmlns="http://java.sun.com/xml/ns/j2ee"    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"    xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-jsptaglibrary_2_0.xsd"    version="2.0">  <description>    Validates JSP pages to prohibit use of scripting elements.  </description>  <tlib-version>1.1</tlib-version>  <short-name>scriptfree</short-name>  <uri>http://jakarta.apache.org/taglibs/standard/scriptfree</uri>  <validator>    <description>      Validates prohibitions against scripting elements.    </description>    <validator-class>    javax.servlet.jsp.jstl.tlv.ScriptFreeTLV    </validator-class>    <init-param>      <description>        Controls whether or not declarations are considered valid.      </description>      <param-name>allowDeclarations</param-name>      <param-value>false</param-value>    </init-param>    <init-param>      <description>        Controls whether or not scriptlets are considered valid.      </description>      <param-name>allowScriptlets</param-name>      <param-value>false</param-value>    </init-param>    <init-param>      <description>        Controls whether or not top-level expressions are considered valid.      </description>      <param-name>allowExpressions</param-name>      <param-value>false</param-value>    </init-param>    <init-param>      <description>        Controls whether or not expressions used to supply request-time        attribute values are considered valid.      </description>      <param-name>allowRTExpressions</param-name>      <param-value>false</param-value>    </init-param>  </validator></taglib>