anchor.diff:          else
           {
               propertyString = setProperty( propertyString, WikiEngine.PROP_APPNAME, appname );
  -            propertyString = setProperty( propertyString, WikiEngine.PROP_BASEURL, baseurl );
  -            propertyString = setProperty( propertyString, FileSystemProvider.PROP_PAGEDIR, dir );
  -            propertyString = setProperty( propertyString, BasicAttachmentProvider.PROP_STORAGEDIR, dir );
  -            propertyString = setProperty( propertyString, WikiEngine.PROP_WORKDIR, workdir );
  -            propertyString = setProperty( propertyString, "log4j.appender.FileLog.File", logdir );
  +            propertyString = setProperty( propertyString, WikiEngine.PROP_BASEURL, sanitizeURL(baseurl) );
  +            propertyString = setProperty( propertyString, FileSystemProvider.PROP_PAGEDIR, sanitizePath(dir) );
  +            propertyString = setProperty( propertyString, BasicAttachmentProvider.PROP_STORAGEDIR, sanitizePath(dir) );
  +            propertyString = setProperty( propertyString, WikiEngine.PROP_WORKDIR, sanitizePath(workdir) );
  +            propertyString = setProperty( propertyString, "log4j.appender.FileLog.File", sanitizePath( logdir ) );
               
               if( password1 != null )
               {
  
positive.code:     String message = null;
      String propertyResult = null;
      
  	public String setProperty( String propertyfile, String key, String value )
  	{
          int idx = 0;
  
negative.code:             try
              {
                  writeProperties( findPropertyFile(getServletContext()), propertyString );
                  message = "Your new properties have been saved.  Please restart your container (unless this was your first install).  Scroll down a bit to see your new jspwiki.properties.";
              }
              catch( IOException e )
              {
  