    set_table_data(data) {
        this.clear_table();
        for (var i in data) {
            this.add_row(data[i]);
        }
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.