    public function testMultipleTags()
    {
        $bbcode = 'this is some text with [b]bold tags[/b] and [i]italics[/i] and ' .
                  'things like [u]that[/u].';
        $text = 'this is some text with bold tags and italics and things like that.';
        $this->assertTextOutput($bbcode, $text);
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.