anchor.diff:      var creators_arr = new Array();
   
       for(var i = 0; i < creator_settings.length; i++) {
  -        creator_name = creator_settings[i][0];
  +        creator_name = encodeHTML(creator_settings[i][0]);
           creator_email = creator_settings[i][1];
           creator_id = creator_settings[i][2];
           creator_email_text = "";
  
positive.code: function deleteCreator(creator_name, creator_id) {
      // remove the actual record for the creator
      for(var i = 0; i < creator_settings.length; i++)
          if(creator_settings[i][0] == decodeURIComponent(creator_name) && creator_settings[i][2] == creator_id) {
              creator_settings.splice(i, 1);
              break;
          }
  
negative.code:     creator_email = '<%= h(c.email) -%>';
  
      //creator_settings.push([creator_name, creator_email, creator_id]);
      addCreator(decodeHTML(creator_name),creator_email,creator_id);
  <% end -%>
  
    // ..and update the page to make existing creators visible
  