    text(notificationName, data) {
      const username = `<span>${formatUsername(data.display_username)}</span>`;
      let description;
      if (data.topic_title) {
        description = `<span data-topic-id="${this.attrs.topic_id}">${data.topic_title}</span>`;
      } else {
        description = this.description(data);
      }

      return I18n.t(data.message, { description, username });
    },
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.