anchor.diff:      String url = (new ActionURL(WNPRC_ComplianceController.BeginAction.class, getContainer())).toString();
   %>
   <div class="text-center" style="margin-bottom: 10px;">
  -    <a class="btn btn-primary" href="<%= url %>">
  +    <a class="btn btn-primary" href="<%=h(url)%>">
           <span class="glyphicon glyphicon-home"></span>
           TB Dashboard
       </a>
  
positive.code:                 ActionURL searchQuery = new ActionURL(WNPRC_ComplianceController.GetClearancesFromPerson.class, getContainer());
              %>
  
              var tbUrl = LABKEY.ActionURL.buildURL('<%= searchQuery.getController() %>', '<%= searchQuery.getAction()%>', null, {
                  query: row.rowData[0],
                  table: "mapTBClearances"
              });
  
negative.code:             <div class="panel-heading">TB Clearances</div>
              <div class="panel-body" data-bind="with: results">
  
                  <div data-bind="visible:loadingResults()"><img src="<%=h(getContextPath())%>/webutils/icons/loading.svg">Loading...</div>
                  <div id="person-results" data-bind="visible:!loadingResults()">
                      <!-- ko if: TBClearances().length == 0 -->
                      <div style="padding-bottom:10px"><strong>Please select a person.</strong></div>
  