Index: org/apache/jasper/security/SecurityUtil.java
===================================================================
--- org/apache/jasper/security/SecurityUtil.java	(revision 831814)
+++ org/apache/jasper/security/SecurityUtil.java	(working copy)
@@ -55,7 +55,7 @@
 
         char content[] = new char[message.length()];
         message.getChars(0, message.length(), content, 0);
-        StringBuffer result = new StringBuffer(content.length + 50);
+        StringBuilder result = new StringBuilder(content.length + 50);
         for (int i = 0; i < content.length; i++) {
             switch (content[i]) {
             case '<':