anchor.diff:  				catch(org.owasp.validator.html.ScanException e) {
   					userParams = [arguments.context];
   					logParams = [arguments.context, e.getMessage()];
  -					throwException(createObject("component", "org.owasp.esapi.errors.ValidationException").init(variables.ESAPI, variables.ESAPI.resourceBundle().messageFormat("Validator.htmlError.userMessage", userParams), variables.ESAPI.resourceBundle().messageFormat("Validator.htmlScanError.logMessage", logParams), e, arguments.context));
  +					throwException(createObject("component", "org.owasp.esapi.errors.ValidationException").init(variables.ESAPI, variables.ESAPI.resourceBundle().messageFormat("Validator.htmlScanError.userMessage", userParams), variables.ESAPI.resourceBundle().messageFormat("Validator.htmlScanError.logMessage", logParams), e, arguments.context));
   				}
   				catch(org.owasp.validator.html.PolicyException e) {
   					userParams = [arguments.context];
   					logParams = [arguments.context, e.getMessage()];
  -					throwException(createObject("component", "org.owasp.esapi.errors.ValidationException").init(variables.ESAPI, variables.ESAPI.resourceBundle().messageFormat("Validator.htmlError.userMessage", userParams), variables.ESAPI.resourceBundle().messageFormat("Validator.htmlPolicyError.logMessage", logParams), e, arguments.context));
  +					throwException(createObject("component", "org.owasp.esapi.errors.ValidationException").init(variables.ESAPI, variables.ESAPI.resourceBundle().messageFormat("Validator.htmlPolicyError.userMessage", userParams), variables.ESAPI.resourceBundle().messageFormat("Validator.htmlPolicyError.logMessage", logParams), e, arguments.context));
   				}
   			}
   		</cfscript>
  
positive.code: 						return canonical;
  					}
  				}
  				throwException(createObject("component", "org.owasp.esapi.errors.ValidationException").init(variables.ESAPI, arguments.context & ": Invalid file name does not have valid extension ( " & variables.ESAPI.securityConfiguration().getAllowedFileExtensions() & ")", "Invalid file name does not have valid extension ( " & variables.ESAPI.securityConfiguration().getAllowedFileExtensions() & "): context=" & arguments.context & ", input=" & arguments.input, arguments.context));
  			}
  		</cfscript>
  
  
negative.code: 		<cfscript>
  			// CF8 requires 'var' at the top
  			var dir = "";
  			var canonicalPath = "";
  			var canonical = "";
  			var userParams = [];
  			var logParams = [];
  
  			if(structKeyExists(arguments, "errorList")) {
  				try {
  