    public function __construct () {
        if (self::existConf()) {
            # code...
            self::config('config');
            self::lang(GX_LANG);
        }else{
            GxMain::install();
        }
        
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.