anchor.diff:  
               <% for(int i =0 ; i< claimUris.length ; i++){
   
  -           		 if(claimUris[i].equals(Encode.forJavaScriptBlock(googleFamilyNameClaim))){  %>
  -            google_prov_family_email_option += '<option  selected="selected" value="' + "<%=claimUris[i]%>" + '">' + "<%=claimUris[i]%>" + '</option>';
  +           		 if(claimUris[i].equals(googleFamilyNameClaim)){  %>
  +            google_prov_family_email_option += '<option  selected="selected" value="' + "<%=Encode.forHtmlAttribute(claimUris[i])%>" + '">' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '</option>';
               <% 	 } else {  %>
  -            google_prov_family_email_option += '<option value="' + "<%=claimUris[i]%>" + '">' + "<%=claimUris[i]%>" + '</option>';
  +            google_prov_family_email_option += '<option value="' + "<%=Encode.forHtmlAttribute(claimUris[i])%>" + '">' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '</option>';
               <%	 }
               }%>
   
  
positive.code:                                 </td>
                                  <td><span><input id="google_prov_private_key"
                                                   name="google_prov_private_key" type="file"/>
  									<% if (Encode.forJavaScriptBlock(googleProvPrivateKeyData) != null) { %>
                                           <img src="images/key.png" alt="key" width="14" height="14"
                                                style=" padding-right: 5px; "><label>Private Key attached</label>
  									<% } %></span>
  
negative.code: 
              <% for(int i =0 ; i< claimUris.length ; i++){
  
             		 if(claimUris[i].equals(googlePrimaryEmailClaim)){  %>
              google_prov_email_option += '<option  selected="selected" value="' + "<%=Encode.forHtmlAttribute(claimUris[i])%>" + '">' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '</option>';
              <% 	 } else {  %>
              google_prov_email_option += '<option value="' + "<%=Encode.forHtmlAttribute(claimUris[i])%>" + '">' + "<%=Encode.forHtmlContent(claimUris[i])%>" + '</option>';
              <%	 }
              }%>
  
  