    escape(title) {
        const tagsToReplace = {
            '&': '&amp;',
            '<': '&lt;',
            '>': '&gt;',
        };

        return title.replace(/[&<>]/g, function(tag) {
            return tagsToReplace[tag] || tag;
        });
    };
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.