anchor.diff:                                          for (String policyType : policyTypes) {
                                               if (policyTypeFilter.equals(policyType)) {
                                       %>
  -                                    <option value="<%= policyType%>" selected="selected"><%= policyType%>
  +                                    <option value="<%=Encode.forHtmlAttribute(policyType)%>" selected="selected"><%=Encode.forHtmlContent(policyType)%>
                                       </option>
                                       <%
                                       } else {
                                       %>
  -                                    <option value="<%= policyType%>"><%= policyType%>
  +                                    <option value="<%=Encode.forHtmlAttribute(policyType)%>"><%=Encode.forHtmlContent(policyType)%>
                                       </option>
                                       <%
                                               }
  
positive.code:                         if (canPublish) {
                      %>
                      <a title="<fmt:message key='publish.to.pdp'/>"   id="publish"
                         onclick="publishPolicyToPDP('<%=policies[i].getPolicyId()%>');return false;"
                         href="#" style="background-image: url(images/publish.gif);" class="icon-link">
                          <fmt:message key='publish.to.pdp'/></a>
                      <%
  
negative.code:                         }
                      %>
                      <nobr>
                          <img src="images/<%=Encode.forUriComponent(policies[i].getPolicyType())%>-type.gif"
                               title="<%=Encode.forHtmlAttribute(policies[i].getPolicyType())%>"
                               alt="<%=Encode.forHtmlAttribute(policies[i].getPolicyType())%>"/>
                          <%=Encode.forHtmlContent(policies[i].getPolicyType())%>
                      </nobr>
                  </td>
                  
  