            return $this->inHead($token);

        /* Anything else */
        } else {
            /* Act as if a start tag token with the tag name "body" and no
            attributes had been seen, and then reprocess the current token. */
            $this->afterHead(array(
                'name' => 'body',
                'type' => HTML5::STARTTAG,
                'attr' => array()
            ));

            return $this->inBody($token);
        }
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.