static String sanitize(String input) {
    // Basic test to try to avoid any XSS attacks or HTML content showing up.
    // Duplicates HtmlQuoting a little, but avoid destroying ampersand.
    if (ALPHA_NUMERIC.matcher(input).matches()) {
      return input;
    }
    throw new RuntimeException("Non-alphanumeric data found in input, aborting.");
  }
Servlet to serve files generated by {@link ProfileServlet}
hbase-http/src/main/java/org/apache/hadoop/hbase/http/ProfileOutputServlet.java