	    public String getHeader(String name) {
	        //logger.info("Ineader .. parameter .......");
	        String value = super.getHeader(name);
	        if (value == null)
	            return null;
	        //logger.info("Ineader RequestWrapper ........... value ....");
	        return cleanXSS(value);
	    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.