anchor.diff:  
                 </table>
                 <input type="hidden" name="referer" id="referer" value="<%=HTTPUtils.getRefererParmEncode(request)%>">
  -              <input type="hidden" name="dictionary" id="dictionary" value="<%=adv_search_vocabulary%>">
  -              <input type="hidden" name="version" id="version" value="<%=adv_search_version%>">
  -
  -              <input type="hidden" name="adv_search_type" id="adv_search_type" value="<%=adv_search_type%>" />
  +              <input type="hidden" name="dictionary" id="dictionary" value="<%=HTTPUtils.cleanXSS(adv_search_vocabulary)%>">
  +              <input type="hidden" name="version" id="version" value="<%=HTTPUtils.cleanXSS(adv_search_version)%>">
  +
  +              <input type="hidden" name="adv_search_type" id="adv_search_type" value="<%=HTTPUtils.cleanXSS(adv_search_type)%>" />
   <!--
               </form>
    -->           
  
positive.code:                
                  <table>
                    <tr><td>
                      <input CLASS="searchbox-input" name="matchText" value="<%=search_string%>" 
                             onkeypress="return submitEnter('adv_search',event)" tabindex="1">
                      <h:commandButton id="adv_search" value="Search" action="#{userSessionBean.advancedSearchAction}"
                        onclick="javascript:cursor_wait();"
  
negative.code:                     </tr>
  
                    <% } else if (selectSearchOption.equals("Relationship")) { %>
                      <input type="hidden" name="selectProperty" id="selectProperty" value="<%=HTTPUtils.cleanXSS(selectProperty)%>">
                      <tr>
                        <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                        <td>
  