    public function setAttributes ($values, $safeOnly=true) {
        if (isset ($values['type']) && $this->type !== $values['type']) {
            $this->_typeChanged = true;
        }
        return parent::setAttributes ($values, $safeOnly);
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.