anchor.diff:                          if (ruleId != null && ruleId.trim().length() > 0 && !ruleId.trim().equals("null")) {
                       %>
                       <input type="text" name="ruleId" id="ruleId" class="text-box-big"
  -                           value="<%=Encode.forHtmlAttribute(basicRuleDTO.getRuleId())%>"/>
  +                           value="<%=Encode.forHtml(basicRuleDTO.getRuleId())%>"/>
                       <%
                       } else {
                       %>
  
positive.code:                 <td>
                      <a class="icon-link" onclick="updownthis(this,'up')" style="background-image:url(../admin/images/up-arrow.gif)"></a>
                      <a class="icon-link" onclick="updownthis(this,'down')" style="background-image:url(../admin/images/down-arrow.gif)"></a>
                      <input type="hidden" value="<%=ruleElementDTO.getRuleId()%>"/>
                      <%=ruleElementDTO.getRuleId()%>
                  </td>
                  <td><%=ruleElementDTO.getRuleEffect()%></td>
                  <td>
                      <a href="#" onclick="editRule('<%=Encode.forJavaScriptAttribute(ruleElementDTO.getRuleId())%>')"
                         class="icon-link" style="background-image:url(images/edit.gif);"><fmt:message
                              key="edit"/></a>
                      <a href="#" onclick="deleteRule('<%=Encode.forJavaScriptAttribute(ruleElementDTO.getRuleId())%>')"
                         class="icon-link" style="background-image:url(images/delete.gif);"><fmt:message
                              key="delete"/></a>
                  </td>
  
negative.code:     String selectedAttributeId = request.getParameter("selectedAttributeId");
      String category = request.getParameter("category");
  
      String ruleId = Encode.forHtml(request.getParameter("ruleId"));
      if(ruleId != null && ruleId.trim().length() > 0 && !ruleId.trim().equals("null") ) {
          basicRuleDTO = entitlementPolicyBean.getBasicRuleElement(ruleId);
      }
  