anchor.diff:  	private static final Pattern NAVCMD_PATTERN = Pattern.compile("[0-9]*[:]?[0-9]*");
   	private static final Pattern INT_PATTERN = Pattern.compile("[0-9]*");
   	private static final Pattern LINK_HIDDEN_PATTERN = Pattern.compile("[cdeBrowserTree:]*([[0-9]*[:]]*t2g|_idJsp3)");
  +	private static final Pattern TREE_PARAMS_PATTERN = Pattern.compile("[[a-zA-Z0-9]*[;]?[a-zA-Z0-9]*]*");
   	
   	private void filterHiddenVariables(HttpServletRequest request, HttpServletResponse response) throws java.io.IOException{
   		boolean valid = true;
  
positive.code: 		String linkHidden = request.getParameter("cdeBrowserTree:_link_hidden_");
  		String navCmd = request.getParameter("cdeBrowserTree:org.apache.myfaces.tree.NAV_COMMAND");
  		String submit = request.getParameter("cdeBrowserTree_SUBMIT");
  		
  		if (autoScroll != null && !AUTOSCROLL_PATTERN.matcher(autoScroll).matches()) {
      		valid = false;
  
negative.code: 			valid = false;
  		}
  		if (submit != null && valid && !INT_PATTERN.matcher(submit).matches()) {
  			valid = false;
  		}
  		if (treeParams != null && valid && !TREE_PARAMS_PATTERN.matcher(treeParams).matches()) {
  			valid = false;
  		}
  		
  