How to check malicius code on jax ws service input

Question

I\'d created a jax ws soap service and I\'d like to avoid malicius code on string fields, are there any way to do it configuring the service or checking the whole imput and not