anchor.diff:  				<div class="error-message"><c:out value="${msg}"/></div>
   			</c:if>
   			<form id="login_form" name="login_form" action="login" method="post" class="form-horizontal">
  -				<input type="hidden" name="realm" value="${realm}"/>
  -				<input type="hidden" name="SAMLRequest" value="${SAMLRequest}"/>
  +				<input type="hidden" name="realm" value="${fn:escapeXml(realm)}"/>
  +				<input type="hidden" name="SAMLRequest" value="${fn:escapeXml(SAMLRequest)}"/>
   				<fieldset>
   					<div class="control-group">
   						<label for="user_id" class="control-label">User Name:</label>
  
positive.code: 							SLI Sandbox IDP
  						</c:when>
  						<c:otherwise>
  							SLI Mock IDP for ${realm}
  						</c:otherwise>
  					</c:choose>
  				</span>
  
negative.code: <%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c"%>
  <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn" %>
  <%@ page session="false"%>
  <html>
  <head>
  