anchor.diff:  		</cfscript>
   	</cffunction>
   
  -	<!--- getServletPath --->
  +
  +	<cffunction access="public" returntype="String" name="getServletPath" output="false" hint="Returns the server path from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  +		<cfscript>
  +	        local.path = getHttpServletRequest().getServletPath();
  +	        local.clean = "";
  +	        try {
  +	            local.clean = instance.ESAPI.validator().getValidInput("HTTP servlet path: " & local.path, local.path, "HTTPServletPath", 100, false);
  +	        } catch (cfesapi.org.owasp.esapi.errors.ValidationException e) {
  +	            // already logged
  +	        }
  +	        return local.clean;
  +    	</cfscript>
  +	</cffunction>
  +
   
   	<cffunction access="public" returntype="any" name="getSession" output="false" hint="cfesapi.org.owasp.esapi.HttpSession: Returns a session, creating it if necessary, and sets the HttpOnly flag on the JSESSIONID cookie.">
   		<cfargument type="boolean" name="create" required="false">
  
positive.code:         </cfscript>
  	</cffunction>
  
  	<!--- getRemoteUser --->
  
  	<cffunction access="public" returntype="any" name="getRequestDispatcher" output="false" hint="java.servlet.RequestDispatcher: Checks to make sure the path to forward to is within the WEB-INF directory and then returns the dispatcher. Otherwise returns null.">
  		<cfargument type="String" name="path" required="true" hint="The path to create a request dispatcher for">
  
negative.code:         </cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="Array" name="getAttributeNames" output="false" hint="An Enumeration of attribute names.">
  		<cfscript>
          	return getHttpServletRequest().getAttributeNames();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getAuthType" output="false" hint="The authentication type">
  		<cfscript>
          	return getHttpServletRequest().getAuthType();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getCharacterEncoding" output="false" hint="The character-encoding for this HttpServletRequest">
  		<cfscript>
          	return getHttpServletRequest().getCharacterEncoding();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="numeric" name="getContentLength" output="false" hint="The content-length for this HttpServletRequest">
  		<cfscript>
          	return getHttpServletRequest().getContentLength();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getContentType" output="false" hint="The content-type for this HttpServletRequest">
  		<cfscript>
          	return getHttpServletRequest().getContentType();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getContextPath" output="false" hint="Returns the context path from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  		<cfscript>
  	        local.path = getHttpServletRequest().getContextPath();
  	        local.clean = "";
  	        try {
  	            local.clean = instance.ESAPI.validator().getValidInput("HTTP context path: " & local.path, local.path, "HTTPContextPath", 150, false);
  	        } catch (cfesapi.org.owasp.esapi.errors.ValidationException e) {
  	            // already logged
  	        }
  	        return local.clean;
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="Array" name="getCookies" output="false" hint="Returns the array of Cookies from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  		<cfscript>
  