    public function setTextareaDimensions($cols = null, $rows = null) {
        if ($cols) $this->fields['default']->cols = $cols;
        if ($rows) $this->fields['default']->rows = $rows;
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.