On a tangent, you should for sure not re-create the ValidatorFactory on each request. The factory is supposed to be created once and then be cached. The actual Validator instance on the other can be re-created.