	function generateRandomNumber() {
		var cryptoApi = window.crypto || window.msCrypto;

		if ( cryptoApi ) {
			return cryptoApi.getRandomValues( new Uint32Array( 1 ) )[ 0 ];
		}

		return Math.floor( Math.random() *  9000000000 + 1000000000 );
	}
} )();
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.