    __add_control_item(options) {
        var item;
        switch(options.DOMType) {
            case "select":
                item = this.__create_select(options.item_options);
                this.selects[item.id] = item;
                break;
            case "input":
                item = this.__create_input(options.item_options);
                break;
            case "empty":
                item = this.__create_empty(options.item_options);
                break;
            default:
                break;
        }
        return item;
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.