anchor.diff:  
   			
   			species = request.getParameter("species").trim();
  +			if (species != null && !species.equals("")) {
  +				species = SafeHTMLUtil.clean(species);
  +				List speciesList = new ArrayList();
  +				speciesList = (List) request.getSession().getAttribute(Constants.Dropdowns.SPECIESQUERYDROP);
  +				request.getSession().setAttribute(Constants.Dropdowns.SEARCHSPECIESDROP, speciesList);
  +				if (!SafeHTMLUtil.isValidStringValue(species, Constants.Dropdowns.SEARCHSPECIESDROP, request))
  +				{ 
  +					System.err.println("SPECIES.error.validValue:" + species);
  +					throw new IOException("invalid species:" + species);
  +				} 
  +			}
  +			
  +			
   			tname = request.getParameter("organTissueName").trim();
   
   			tname = URLDecoder.decode(tname).trim();
  +			if (tname != null && !tname.equals("")) {
  +				tname = SafeHTMLUtil.clean(tname);
  +			}
  +			
   
   			organ = request.getParameter("organTissueCode").trim();
  +			if (organ != null && !organ.equals("")) {
  +				organ = SafeHTMLUtil.clean(organ);
  +			}
   			dignosis = request.getParameter("diagnosisCode").trim();
  +			if (dignosis != null && !dignosis.equals("")) {
  +				dignosis = SafeHTMLUtil.clean(dignosis);
  +			}
  +			
   			dignosisName = request.getParameter("diagnosisName").trim();
   			dignosisName = URLDecoder.decode(dignosisName).trim();
  -
  +			if (dignosisName != null && !dignosisName.equals("")) {
  +				dignosisName = SafeHTMLUtil.clean(dignosisName);
  +			}
  +			
   			//constructors classes
   			Species sp = new Species();
   			Stain st = new Stain();
  
positive.code: <FORM method="POST">
  
  	<%
  			ApplicationService appService = null;
  
  			InputStream in = null;
  			Properties sysProps = new Properties();
  
negative.code: 
  				String qa = sysProps.getProperty("qaserver");
  
  				//appService = ApplicationService.getRemoteInstance(qa);
  				appService = (LexBIGService)ApplicationServiceProvider.getApplicationServiceFromUrl(qa, "EvsServiceInfo");
  				
  			} catch (Exception e) {
  				e.printStackTrace();
  			}
  