    public function testNormalizeTags () {
        $tags = array (
            'test',
            '#test', 
            '#test,', 
            '##test,', 
        );
        $normalizedTags = array (
            '#test',
            '#test', 
            '#test', 
            '##test', 
        );
        $normalizedTagsSuppressedHash = array (
            'test',
            'test', 
            'test', 
            '#test', 
        );
        $this->assertEquals ($normalizedTags, Tags::normalizeTags ($tags, false));
        $this->assertEquals (
            $normalizedTagsSuppressedHash, Tags::normalizeTags ($tags, true));
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.