    var create_tag_title = function(description, owner, tagset, link_owner) {
        var title = "";
        if (owner) {
            title += "<b>Owner:</b> " + owner.escapeHTML() + "<br />";
        }
        if (link_owner) {
            title += "<b>Linked by:</b> " + link_owner.escapeHTML() + "<br />";
        }
        if (description) {
            title += "<b>Description:</b> " + description.escapeHTML() + "<br />";
        }
        if (tagset) {
            title += "<b>Tag set:</b> " + tagset.escapeHTML() + "<br />";
        }
        return title;
    };
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.