    public function testImportVisibility() {
        $csvFile = 'contacts-visibility.csv';
        $this->prepareImport ('Contacts', $csvFile);
        $expected = $this->stashModels ('Contacts');
        $this->assertGreaterThan (0, count($expected),
            'Failed to load fixture! Models were expected');
        $this->beginImport();
        $this->assertNoValidationErrorsPresent();
        $this->assertModelsWereImported ($expected, 'Contacts');
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.