generate_mail_credentials = function() {
    var div = $('.mail-infoblock').clone();
    div.find('#mail_configuration').remove();
    var pass=div.find('#v_password').text();
    if (pass=="") div.find('#v_password').text(' ');
    var output = div.text();
    output=output.replace(/(?:\r\n|\r|\n|\t)/g, "|");
    output=output.replace(/  /g, "");
    output=output.replace(/\|\|/g, "|");
    output=output.replace(/\|\|/g, "|");
    output=output.replace(/\|\|/g, "|");
    output=output.replace(/^\|+/g, "");
    output=output.replace(/\|$/, "");
    output=output.replace(/ $/, "");
    output=output.replace(/:\|/g, ": ");
    output=output.replace(/\|/g, "\n");
    //console.log(output);
    $('#v_credentials').val(output);
}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.