anchor.diff:     <form method="get" action="<%= request.getContextPath() + searchScope + "/simple-search" %>">
      <table border="0">
          <tr><td>
  -           <input type="hidden" name="query" value="<%= URLEncoder.encode(query,"UTF-8") %>" />
  +           <input type="hidden" name="query" value="<%= StringEscapeUtils.escapeHtml(query) %>" />
              <fmt:message key="search.results.perpage"/>
              <select name="rpp">
   <%
  
positive.code:     String prevURL =  request.getContextPath()
                      + searchScope
                      + "/simple-search?query="
                      + URLEncoder.encode(query)
                      + "&amp;sort_by=" + (so != null ? so.getNumber() : 0)
                      + "&amp;order=" + order
                      + "&amp;rpp=" + rpp
  
negative.code:                     + request.getContextPath()
                      + searchScope
                      + "/simple-search?query="
                      + URLEncoder.encode(query,"UTF-8")
                      + "&amp;sort_by=" + (so != null ? so.getNumber() : 0)
                      + "&amp;order=" + order
                      + "&amp;rpp=" + rpp
  