anchor.diff:  		<cfargument required="true" name="value"/>
   
   		<cfscript>
  -			return variables.httpSession.setAttribute(javaCast("string", arguments.name), arguments.value);
  +			var applicationName = variables.ESAPI.httpUtilities().getApplicationName();
  +			if(applicationName != "") {
  +				if(!structKeyExists(variables.httpSession, applicationName)) {
  +					variables.httpSession[applicationName] = {};
  +				}
  +				variables.httpSession[applicationName][lCase(arguments.name)] = arguments.value;
  +			}
  +			else {
  +				variables.httpSession.setAttribute(javaCast("string", arguments.name), arguments.value);
  +			}
   		</cfscript>
   
   	</cffunction>
  
positive.code: ﻿<!---
  /**
   * OWASP Enterprise Security API (ESAPI)
   *
  
negative.code: 		<cfargument required="true" type="String" name="name"/>
  
  		<cfscript>
  			var applicationName = variables.ESAPI.httpUtilities().getApplicationName();
  			if(applicationName != "") {
  				if(structKeyExists(variables.httpSession, applicationName) && structKeyExists(variables.httpSession[applicationName], lCase(arguments.name))) {
  					return variables.httpSession[applicationName][lCase(arguments.name)];
  				}
  			}
  			else {
  				return variables.httpSession.getAttribute(javaCast("string", arguments.name));
  			}
  			return "";
  		</cfscript>
  
  	</cffunction>
  