anchor.diff:                  <tr>
                       <td style="width:15%" class="leftCol-med labelField"><fmt:message key='config.application.template.description'/>:</td>
                       <td>
  -                        <textarea style="width:50%" type="text" name="template-description" id="template-description" class="text-box-big"><%=templateDesc%></textarea>
  +                        <textarea style="width:50%" type="text" name="template-description" id="template-description"
  +                                  class="text-box-big"><%=Encode.forHtmlContent(templateDesc)%></textarea>
                           <div class="sectionHelp">
                               <fmt:message key='help.desc'/>
                           </div>
  
positive.code:                 <tr>
                      <td style="width:15%" class="leftCol-med labelField"><fmt:message key='config.application.template.name'/>:<span class="required">*</span></td>
                      <td>
                          <input id="template-name" name="template-name" type="text" value=<%=templateName%> white-list-patterns="^[a-zA-Z0-9\s._-]*$" autofocus/>
                          <div class="sectionHelp">
                              <fmt:message key='help.name'/>
                          </div>
  
negative.code: <%@ page import="org.wso2.carbon.utils.ServerConstants" %>
  <%@ page import="org.wso2.carbon.identity.application.mgt.ui.client.ApplicationManagementServiceClient" %>
  <%@ page import="org.wso2.carbon.identity.application.common.model.xsd.SpTemplate" %>
  <%@ page import="org.owasp.encoder.Encode" %>
  
  <jsp:include page="../dialog/display_messages.jsp"/>
  <fmt:bundle
  