anchor.diff:                      </tr>
   
                     <% } else if (selectSearchOption.equals("Relationship")) { %>
  -                    <input type="hidden" name="selectProperty" id="selectProperty" value="<%=selectProperty%>">
  +                    <input type="hidden" name="selectProperty" id="selectProperty" value="<%=HTTPUtils.cleanXSS(selectProperty)%>">
                       <tr>
                         <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                         <td>
  
positive.code:                 <tr><td>
                    <table>
                    <% if (selectSearchOption.equals("Property")) { %>
                      <input type="hidden" name="rel_search_association" id="rel_search_association" value="<%=rel_search_association%>">
                      <input type="hidden" name="rel_search_rela" id="rel_search_rela" value="<%=rel_search_rela%>">
                      <tr>
                        <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                        <td>
  
negative.code: 
                </table>
                <input type="hidden" name="referer" id="referer" value="<%=HTTPUtils.getRefererParmEncode(request)%>">
                <input type="hidden" name="dictionary" id="dictionary" value="<%=HTTPUtils.cleanXSS(adv_search_vocabulary)%>">
                <input type="hidden" name="version" id="version" value="<%=HTTPUtils.cleanXSS(adv_search_version)%>">
  
                <input type="hidden" name="adv_search_type" id="adv_search_type" value="<%=HTTPUtils.cleanXSS(adv_search_type)%>" />
  <!--
              </form>
   -->           
  