character filtering from requests

[aljosa.mohorovic]

i use hibernate so i don't create sql strings directly and i use spring forms (SimpleFormController,AbstractWizardFormController ) so i was wondering do i need to bother with character filtering from requests, searching for some chars that could break application/security.

what are security concerns when using hibernate/spring?

Aljosa