    public function testOneTagWithSurroundingText()
    {
        $this->assertTextOutput('buffer text [b]this is bold[/b] buffer text',
                              'buffer text this is bold buffer text');
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.