anchor.diff:      Asset asset = m_model.getAsset(nodeId);
       nodeModel.put("asset", asset);
       if (asset != null && asset.getBuilding() != null && asset.getBuilding().length() > 0) {
  -        nodeModel.put("statusSite", asset.getBuilding());
  +        nodeModel.put("statusSite", WebSecurityUtils.sanitizeString(asset.getBuilding(),true));
       }
       
       nodeModel.put("lldp",    EnLinkdElementFactory.getInstance(getServletContext()).getLldpElement(nodeId));
  
positive.code:       </tr>
        <tr>
          <th>Location</th>
          <td>${model.node.sysLocation}</td>
        </tr>
        <tr>
          <th>Contact</th>
          <td>${model.node.sysContact}</td>
        </tr>
        <tr>
          <th valign="top">Description</th>
          <td valign="top">${model.node.sysDescription}</td>
        </tr>
      </table>
      </div>
  
negative.code:     <table class="table table-condensed">
        <tr>
          <th>Name</th>
          <td>${model.sysName}</td>
        </tr>
        <tr>
          <th>sysObjectID</th>
  