export function stringEncode(string: string) {
    let encodedString = '';
    for (let i = 0; i < string.length; i++) {
        let charCodePointHex = string.charCodeAt(i).toString(16);
        encodedString += `\\u${charCodePointHex}`;
    }
    return encodedString;
}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.