anchor.diff:  					}
   					selectedProIdpConnectors.put(idp.getIdentityProviderName(), options);
   				} else if(proIdp!=null && options == null) {
  -					String disabledOption = startOption + proIdp.getName() + "\" selected=\"selected" + middleOption + proIdp.getName() + disbleText + endOPtion;
  +					String disabledOption = startOption + Encode.forHtmlContent(proIdp.getName()) + "\" selected=\"selected" + middleOption + Encode.forHtmlContent(proIdp.getName()) + disbleText + endOPtion;
   					selectedProIdpConnectors.put(idp.getIdentityProviderName(), disabledOption);
   				} else {
   					options = enabledProIdpConnector.get(idp.getIdentityProviderName());
  
positive.code: 					<tr>
  						<td>				             	  
  							 <select name="provisioning_idps" style="float: left; min-width: 150px;font-size:13px;">
  							             			<%=idpType.toString()%>
  							 </select>
  						     <a id="provisioningIdpAdd" onclick="addIDPRow(this);return false;" class="icon-link" style="background-image:url(images/add.gif);"></a>
  						</td>
  
negative.code: 
  	if (requestPathAuthenticators!=null && requestPathAuthenticators.length>0){
  		for(RequestPathAuthenticatorConfig reqAuth : requestPathAuthenticators) {
  			requestPathAuthTypes.append(startOption + Encode.forHtmlContent(reqAuth.getName()) + middleOption + Encode.forHtmlContent(reqAuth.getDisplayName()) + endOPtion);
  		}
  	}
  	
  