Is it possible to omit escaping some html in <c:out value="${str}">?

I want make secure display (escaping html characters with c:out) but allow some links (<img> <a href>开发者_高级运维 and youtube embedded). How can I do this? Is it possible achieve this with c:out?

---

Use escapeXml

<c:out value="${test}" escapeXml="true" />

To prevent XSS attacks also look at JSoup Cleaner