anchor.diff:              }
           } catch (Exception e) {
               response.setStatus(500);
  -            %><%=e.getMessage()%><%
  +            %><%=Encode.forHtml(e.getMessage())%><%
               return;
           }
       %>
  
positive.code:         String cookie = (String) session.getAttribute(ServerConstants.ADMIN_SERVICE_COOKIE);
  
          String path = request.getParameter("path");
          String parentPath = RegistryUtils.getParentPath(path);
          String resourceName = RegistryUtils.getResourceName(path);
          String mediaType;
          String description;
          try {
  
negative.code: <%@ taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt" %>
  <%@ taglib uri="http://www.owasp.org/index.php/Category:OWASP_CSRFGuard_Project/Owasp.CsrfGuard.tld" prefix="csrf" %>
  
  <%@ page import="org.owasp.encoder.Encode" %>
  <%@ page import="org.wso2.carbon.registry.resource.ui.clients.ResourceServiceClient" %>
  <%@ page import="org.wso2.carbon.utils.ServerConstants" %>
  <%@ page import="org.wso2.carbon.registry.core.utils.RegistryUtils" %>
  