anchor.diff:  
   	<cffunction access="public" returntype="void" name="testCreatePath" output="false">
   		<cfscript>
  -			var sf = createObject("component", "org.owasp.esapi.SafeFile").init(request.ESAPI, variables.testFile.getPath());
  +			var sf = createObject("component", "org.owasp.esapi.SafeFile").init(ESAPI=request.ESAPI, path=variables.testFile.getPath());
   			assertTrue(sf.exists());
   		</cfscript>
   	</cffunction>
  
positive.code: 		<cfscript>
  			try
  			{
  				createObject("component", "org.owasp.esapi.SafeFile").init(request.ESAPI, variables.testFile.getParent() & createObject("java", "java.io.File").separator & "file%00.txt");
  				fail("no exception thrown for file name with percent encoded null");
  			}
  			catch(org.owasp.esapi.errors.ValidationException e)
  
negative.code: 			var sf = "";
  
  			try {
  				sf = createObject("component", "org.owasp.esapi.SafeFile").init(ESAPI=request.ESAPI, parent=variables.testDir, child=variables.TEST_FILE_NAME & ":secret.txt");
  				fail("Able to construct SafeFile for alternate data stream: " & sf.getPath());
  			}
  			catch(org.owasp.esapi.errors.ValidationException expected) { }
  