    __get_array_from_DOM_row(tr) {
        var children = tr.children;
        var array = [];
        for (var i = 0; i < children.length-1; i++) {
            array.push(children[i].innerText);
        }
        return array;
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.