Note.renderNote = function(note) {
    if (!note) {
        return;
    }
    // title
    $("#noteTitle").val(note.Title);

    // 当前正在编辑的
    // tags
    Tag.input.setTags(note.Tags);
};
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.