anchor.diff:                                      for(String domainName : domainNames) {
                                           if(selectedDomain.equals(domainName)) {
                                   %>
  -                                <option selected="selected" value="<%=domainName%>"><%=domainName%></option>
  +                                <option selected="selected" value="<%=Encode.forHtmlAttribute(domainName)%>">
  +                                    <%=Encode.forHtmlContent(domainName)%>
  +                                </option>
                                   <%
                                   } else {
                                   %>
  -                                <option value="<%=domainName%>"><%=domainName%></option>
  +                                <option value="<%=Encode.forHtmlAttribute(domainName)%>">
  +                                    <%=Encode.forHtmlContent(domainName)%>
  +                                </option>
                                   <%
                                           }
                                       }
  
positive.code: <fmt:bundle basename="org.wso2.carbon.userstore.ui.i18n.Resources">
  <script>
  
      var navigatorHolder = '<%=navigatorHolder%>';
      var resultHolder = '<%=resultHolder%>';
  
      function search(pageNumber){
          if(!pageNumber){
  
negative.code:     if (claimUri == null || claimUri.length() == 0) {
          claimUri = (java.lang.String) session.getAttribute(UserAdminUIConstants.USER_CLAIM_FILTER);
      }
      session.setAttribute(UserAdminUIConstants.USER_CLAIM_FILTER, claimUri);
      exceededDomains = (FlaggedName) session.getAttribute(UserAdminUIConstants.USER_LIST_CACHE_EXCEEDED);
  
      //  search filter
      String selectedDomain = request.getParameter("domain");
      if (selectedDomain == null || selectedDomain.trim().length() == 0) {
          selectedDomain = (String) session.getAttribute(UserAdminUIConstants.USER_LIST_DOMAIN_FILTER);
          if (selectedDomain == null || selectedDomain.trim().length() == 0) {
              selectedDomain = UserAdminUIConstants.ALL_DOMAINS;
  