anchor.diff:              <legend>With Content Security Policy (CSP)</legend>
               <label for="cspName">Name</label>
               <input type="text" id="cspName" name="cspName" />
  -            <input type="submit" value=" Send" />
  +            <input type="submit" value="Send" />
           </fieldset>
       </form>
   </body>
  
positive.code:             <legend>With JSP Output Escaping</legend>
              <label for="outputEscapedJSPName">Name</label>
              <input type="text" id="outputEscapedJSPName" name="outputEscapedJSPName" />
              <input type="submit" value=" Send" />
          </fieldset>
      </form>
  
  
negative.code:             <legend>With Input Validation</legend>
              <label for="inputValidatedName">Name</label>
              <input type="text" id="inputValidatedName" name="inputValidatedName" pattern="^[^<>]+$" />
              <input type="submit" value="Send" />
          </fieldset>
      </form>
  
  