c-out

<c:if test="${not empty requestScope.message}">
    <div class="alert alert-primary alert-dismissible fade show" role="alert">
        <c:out value="${requestScope.message}" />
        <a href="#" class="close" data-dismiss="alert" aria-label="close" style="font-size: 18pt;">&times;</a>
    </div>
</c:if>