    public function getHeader()
    {
        $html = '<meta charset="utf-8">
                <title>'.$this->getTitle().'</title>
                <meta name="description" content="">';

        $html .= '<link href="'.$this->getStaticUrl('css/bootstrap.css').'" rel="stylesheet">
                <link href="'.$this->getStaticUrl('css/font-awesome.css').'" rel="stylesheet">
                <link href="'.$this->getStaticUrl('css/global.css').'" rel="stylesheet">
                <link href="'.$this->getStaticUrl('css/ui-lightness/jquery-ui.css').'" rel="stylesheet">
                <link href="'.$this->getStaticUrl('../application/modules/user/static/css/user.css').'" rel="stylesheet">
                <script src="'.$this->getStaticUrl('js/jquery.js').'"></script>
                <script src="'.$this->getStaticUrl('js/bootstrap.js').'"></script>
                <script src="'.$this->getStaticUrl('js/jquery-ui.js').'"></script>';
        return $html;
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.