my @selected = map { uri_unescape($_) }split(/,/, $cgi->param($attr));

##</code><code>##

document.getElementById("Finish Codes").value = serialize(document.getElementById("Finish Codes rightbox").options);
document.getElementById("Process Codes").value = serialize(document.getElementById("Process Codes rightbox").options);
.
.
.
function serialize(list) {
   var encodedlist = new Array(list.length);
   for (var i = 0; i != list.length; i++)
   {
      encodeURIComponent(list[i].value);  
      encodedlist.push(list[i].value);     
    }
   return encodedlist.join(",");
}