anchor.diff:                  <tr><td>
                     <table>
                     <% if (selectSearchOption.equals("Property")) { %>
  -                    <input type="hidden" name="rel_search_association" id="rel_search_association" value="<%=rel_search_association%>">
  -                    <input type="hidden" name="rel_search_rela" id="rel_search_rela" value="<%=rel_search_rela%>">
  +                    <input type="hidden" name="rel_search_association" id="rel_search_association" value="<%=HTTPUtils.cleanXSS(rel_search_association)%>">
  +                    <input type="hidden" name="rel_search_rela" id="rel_search_rela" value="<%=HTTPUtils.cleanXSS(rel_search_rela)%>">
                       <tr>
                         <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                         <td>
  
positive.code: 
                </table>
                <input type="hidden" name="referer" id="referer" value="<%=HTTPUtils.getRefererParmEncode(request)%>">
                <input type="hidden" name="dictionary" id="dictionary" value="<%=adv_search_vocabulary%>">
                <input type="hidden" name="version" id="version" value="<%=adv_search_version%>">
  
                <input type="hidden" name="adv_search_type" id="adv_search_type" value="<%=adv_search_type%>" />
  <!--
              </form>
   -->           
  
negative.code:                
                  <table>
                    <tr><td>
                      <input CLASS="searchbox-input" name="matchText" value="<%=HTTPUtils.cleanXSS(search_string)%>" 
                             onkeypress="return submitEnter('adv_search',event)" tabindex="1">
                      <h:commandButton id="adv_search" value="Search" action="#{userSessionBean.advancedSearchAction}"
                        onclick="javascript:cursor_wait();"
  