  void ActivateProfile() {
    if (profile_to_activate_) {
      Browser* browser = chrome::FindBrowserWithProfile(profile_to_activate_);
      if (browser)
        browser->window()->Activate();
      profile_to_activate_ = nullptr;
    }
    activated_profile_ = true;
  }

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.