anchor.diff:                          if (canTryIt) {
                       %>
                       <a title="<fmt:message key='try.this'/>"
  -                       onclick="tryPolicy('<%=policies[i].getPolicyId()%>');return false;"
  +                       onclick="tryPolicy('<%=Encode.forJavaScriptAttribute(policies[i].getPolicyId())%>');return false;"
                          href="#" style="background-image: url(images/evaluate.png);" class="icon-link">
                           <fmt:message key='try.this'/></a>
                       <%
  
positive.code:                         if (canPublish) {
                      %>
                      <a title="<fmt:message key='publish.to.pdp'/>"   id="publish"
                         onclick="publishPolicyToPDP('<%=policies[i].getPolicyId()%>');return false;"
                         href="#" style="background-image: url(images/publish.gif);" class="icon-link">
                          <fmt:message key='publish.to.pdp'/></a>
                      <%
  
negative.code:                                         for (String policyType : policyTypes) {
                                              if (policyTypeFilter.equals(policyType)) {
                                      %>
                                      <option value="<%=Encode.forHtmlAttribute(policyType)%>" selected="selected"><%=Encode.forHtmlContent(policyType)%>
                                      </option>
                                      <%
                                      } else {
                                      %>
                                      <option value="<%=Encode.forHtmlAttribute(policyType)%>"><%=Encode.forHtmlContent(policyType)%>
                                      </option>
                                      <%
                                              }
  