public static String getParameterIM(final HttpServletRequest request, final String param, final boolean checkEmpty) throws BadInputException {
String ret = getParameter(request, param, checkEmpty);
if ( ret.indexOf('<') != -1 ||
ret.indexOf('>') != -1 ||
ret.indexOf('@') != -1) {
throw new BadInputException("The parameter '" + param + "' is not allowed to contain '<' or '>' or '@@' ! Please try again.");
}
return ret;
}