    public static function filterValue($value, $regex, $stripTags = true, array $allowedHtmlTags = [], array $allowedAttributes = [])
    {
        if (empty($value)) {
            return $value;
        }

        if ($stripTags) {
            $value = strip_tags($value);
        }

        if (preg_match($regex, $value)) {
            return null;
        }

        $antiXss = new AntiXSS();
        $antiXss->removeEvilAttributes($allowedHtmlTags);
        $antiXss->removeEvilHtmlTags($allowedAttributes);
        $value = $antiXss->xss_clean($value);

        return \str_replace(['&lt;', '&gt;'], ['<', '>'], $value);
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.