To prevent possible security issues with the tag, you should
Call the reset method if validation fails
Set the tag's redisplay property to false
Set the tag's reset property to false
Use a plain html tag instead