  this.complete = function (result) {
    if (resultsBuffer.length) {
      socket.emit('result', resultsBuffer)
      resultsBuffer = []
    }

    socket.emit('complete', result || {})
    if (this.config.clearContext) {
      navigateContextTo('about:blank')
    } else {
      self.updater.updateTestStatus('complete')
    }
    if (returnUrl) {
      if (!/^https?:\/\//.test(returnUrl)) {
        throw new Error(`Security: Navigation to ${returnUrl} was blocked to prevent malicious exploits.`)
      }
      location.href = returnUrl
    }
  }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.