Missing error page for 400 pages

The XSSUrlFilter is enabled by default and returns a status 400 error when it doesn't like a certain character. By default there is no error page defined for the 400 status code which results in a default error page shown by the container.