anchor.diff:  
   		<cfscript>
   			var applicationName = variables.ESAPI.httpUtilities().getApplicationName();
  +			var cfSession = "";
   			if(applicationName != "") {
  -				if(!structKeyExists(variables.httpSession, applicationName)) {
  -					variables.httpSession[applicationName] = {};
  -				}
  -				variables.httpSession[applicationName][lCase(arguments.name)] = arguments.value;
  +				cfSession = variables.httpSession.getAttribute(applicationName);
  +				if(isNull(cfSession)) {
  +					variables.httpSession.setAttribute(applicationName, {});
  +				}
  +				cfSession[lCase(arguments.name)] = arguments.value;
   			}
   			else {
   				variables.httpSession.setAttribute(javaCast("string", arguments.name), arguments.value);
  
positive.code: 			* CF10 has a sessionInvalidate() method.  Will this work and can we mimic this in CF8/9?
  			*/
  			var applicationName = variables.ESAPI.httpUtilities().getApplicationName();
  			// this technique will not harm session state for other CF applications
  			if(applicationName != "") {
  				// Railo sessions are empty unless you have explicitly set session vars so check for it first
  				if(structKeyExists(variables.httpSession, applicationName)) {
  					structClear(variables.httpSession[applicationName]);
  				}
  			}
  			else {
  
negative.code: 
  		<cfscript>
  			var applicationName = variables.ESAPI.httpUtilities().getApplicationName();
  			var cfSession = "";
  			if(applicationName != "") {
  				cfSession = variables.httpSession.getAttribute(applicationName);
  				if(!isNUll(cfSession) && structKeyExists(cfSession, lCase(arguments.name))) {
  					return cfSession[lCase(arguments.name)];
  				}
  			}
  			else {
  