        function formatObjects(item) {
            otype = item[0];
            unlinked = item[1];
            count = unlinked.length;
            if (count === 0) return '';
            if (count === 1) otype = otype.slice(0, -1);  // remove s
            var namesList = [], names;
            unlinked.forEach(function (u) {
                namesList.push(u.name);
            });
            names = namesList.join(", ");
            names = " <i title='" + namesList.join("\n") + "'>(" + names.slice(0, 40) + (names.length > 40 ? "..." : "") + ")</i>";
            return count + " " + otype + names;
        }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.