anchor.diff:                                            page="queue_add.jsp" pageNumberParameterName="pageNumber"
                                             resourceBundle="org.wso2.carbon.andes.ui.i18n.Resources"
                                             prevKey="prev" nextKey="next"
  -                                          parameters="<%=concatenatedParams%>"/>
  +                                          parameters="<%=Encode.forHtml(concatenatedParams)%>"/>
                       </div>
                       <table class="styledLeft" style="width:100%" id="permissionsTable">
                           <thead>
  
positive.code:                             </td>
                              <td><input type="checkbox"
                                         class="checkboxChanged"
                                         role="<%=rolePermission.getRoleName()%>"
                                         permission="consume"
                                         id="<%=rolePermission.getRoleName()%>^consume"
                                         value="consume" <% if (rolePermission.getAllowedToConsume()) { %>
                                         checked <% } %></td>
                              <td><input type="checkbox"
                                         class="checkboxChanged"
                                         role="<%=rolePermission.getRoleName()%>"
                                         permission="publish"
                                         id="<%=rolePermission.getRoleName()%>^publish"
                                         value="publish"  <% if (rolePermission.getAllowedToPublish()) { %>
                                         checked <% } %></td>
                          </tr>
  
negative.code:                                           page="queue_add.jsp" pageNumberParameterName="pageNumber"
                                            resourceBundle="org.wso2.carbon.andes.ui.i18n.Resources"
                                            prevKey="prev" nextKey="next"
                                            parameters="<%=Encode.forHtml(concatenatedParams)%>"/>
                      </div>
                  </td>
              </tr>
  