    def test_replay_banner_metadata(self, fmod):
        """ Test adding metadata in replay banner (both framed and non-frame)
        """
        resp = self.get('/test/20140103030321{0}/http://example.com/?example=1', fmod)
        assert '<div>Custom Banner Here!</div>' in resp.text
        assert '"some":"value"' in resp.text
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.