anchor.diff:                     class="form-control form-register-control"
                      placeholder="Imię"
                      autofocus
  -                   value="${param.name}">
  +                   value="${fn:escapeXml(param.name)}">
   
               <% if (errors != null && errors.get("name") != null && errors.get("name").length() > 0) { %>
               <div id="name-error" class="alert alert-danger" role="alert"><%= errors.get("name") %></div>
  
positive.code:                    name="email"
                     class="form-control form-register-control"
                     placeholder="Adres email"
                     value="${param.email}">
  
              <% if (errors != null && errors.get("email") != null && errors.get("email").length() > 0) { %>
              <div id="email-error" class="alert alert-danger" role="alert"><%= errors.get("email") %></div>
  
negative.code:                    name="surname"
                     class="form-control form-register-control"
                     placeholder="Nazwisko"
                     value="${fn:escapeXml(param.surname)}">
  
              <% if (errors != null && errors.get("surname") != null && errors.get("surname").length() > 0) { %>
              <div id="surname-error" class="alert alert-danger" role="alert"><%= errors.get("surname") %></div>
  