anchor.diff:                              </td>
                               <td><input type="checkbox"
                                          class="checkboxChanged"
  -                                       role="<%=rolePermission.getRoleName()%>"
  +                                       role="<%=Encode.forHtml(rolePermission.getRoleName())%>"
                                          permission="consume"
  -                                       id="<%=rolePermission.getRoleName()%>^consume"
  +                                       id="<%=Encode.forHtml(rolePermission.getRoleName())%>^consume"
                                          value="consume" <% if (rolePermission.getAllowedToConsume()) { %>
                                          checked <% } %></td>
                               <td><input type="checkbox"
                                          class="checkboxChanged"
  -                                       role="<%=rolePermission.getRoleName()%>"
  +                                       role="<%=Encode.forHtml(rolePermission.getRoleName())%>"
                                          permission="publish"
  -                                       id="<%=rolePermission.getRoleName()%>^publish"
  +                                       id="<%=Encode.forHtml(rolePermission.getRoleName())%>^publish"
                                          value="publish"  <% if (rolePermission.getAllowedToPublish()) { %>
                                          checked <% } %></td>
                           </tr>
  
positive.code:                                           page="queue_add.jsp" pageNumberParameterName="pageNumber"
                                            resourceBundle="org.wso2.carbon.andes.ui.i18n.Resources"
                                            prevKey="prev" nextKey="next"
                                            parameters="<%=concatenatedParams%>"/>
                      </div>
                      <table class="styledLeft" style="width:100%" id="permissionsTable">
                          <thead>
  
negative.code:                                           page="queue_add.jsp" pageNumberParameterName="pageNumber"
                                            resourceBundle="org.wso2.carbon.andes.ui.i18n.Resources"
                                            prevKey="prev" nextKey="next"
                                            parameters="<%=Encode.forHtml(concatenatedParams)%>"/>
                      </div>
                  </td>
              </tr>
  