I have created auto generated sections, controls, paragraphs, correspondence etc in my application. I do have some custom HTML code but there also I have either used p:r to refer a property or parameter or active value or I have used PublicAPI function to filter cross scripting for references.  Is my UI Cross Site Script complaint? If not what else I need to do to be fully complaint? 

Appreciate any help.