anchor.diff:                          if (canViewStatus) {
                       %>
                       <a title="<fmt:message key='view'/>"
  -                       onclick="viewStatus('<%=policies[i].getPolicyId()%>');return false;"
  +                       onclick="viewStatus('<%=Encode.forJavaScriptAttribute(policies[i].getPolicyId())%>');return false;"
                          href="#" style="background-image: url(images/view.gif);" class="icon-link">
                           <fmt:message key='view.status'/></a>
                       <%
  
positive.code:                         if (canViewVersions) {
                      %>
                      <a title="<fmt:message key='versions'/>"
                         onclick="showVersions('<%=policies[i].getPolicyId()%>');return false;"
                         href="#" style="background-image: url(images/edit.gif);" class="icon-link">
                          <fmt:message key='versions'/></a>
                      <%
  
negative.code: <%@ page import="org.wso2.carbon.ui.util.CharacterEncoder" %>
  <%@ page import="org.wso2.carbon.utils.ServerConstants" %>
  <%@ page import="java.util.ResourceBundle" %>
  <%@ page import="org.owasp.encoder.Encode" %>
  <jsp:useBean id="entitlementPolicyBean" type="org.wso2.carbon.identity.entitlement.ui.EntitlementPolicyBean"
               class="org.wso2.carbon.identity.entitlement.ui.EntitlementPolicyBean" scope="session"/>
  <jsp:setProperty name="entitlementPolicyBean" property="*" />
  