I've just started using AntiXSS (4.3.0), mostly to use @Encoder.JavaScriptEncode as described here