anchor.diff:              <% for(int i =0 ; i< claimUris.length ; i++){
   
              		 if(claimUris[i].equals(userIdClaimURI)){  %>
  -            user_id_option += '<option  selected="selected" value="' + "<%=claimUris[i]%>" + '">' + "<%=claimUris[i]%>" + '</option>';
  +            user_id_option += '<option  selected="selected" value="' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '">' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '</option>';
               <% 	 } else {  %>
  -            user_id_option += '<option value="' + "<%=claimUris[i]%>" + '">' + "<%=claimUris[i]%>" + '</option>';
  +            user_id_option += '<option value="' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '">' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '</option>';
               <%	 }
               }%>
   
  
positive.code:                                         <input id="cust_auth_prop_<%=fedConfig.getName()%>#<%=prop.getName()%>"
                                                 name="cust_auth_prop_<%=fedConfig.getName()%>#<%=prop.getName()%>"
                                                 type="password" autocomplete="off"
                                                 value="<%=prop.getValue()%>"
                                                 style="  outline: none; border: none; min-width: 175px; max-width: 180px;"/>
                                          <span id="showHideButtonId"
                                                style=" float: right; padding-right: 5px;">
  
negative.code:                                 <tr>
                                      <td class="leftCol-med labelField"><fmt:message key='logout.url'/>:</td>
                                      <td>
                                          <input id="logoutUrl" name="logoutUrl" type="text"
                                                 value=<%=Encode.forHtmlAttribute(logoutUrl) %>>
  
                                          <div class="sectionHelp">
                                              <fmt:message key='logout.url.help'/>
  