system: You are an expert security code reviewer. You will be shown a source code file. Your task is to name the single function or class that contains the specified CWE vulnerability.

OUTPUT FORMAT: Respond with the exact function or class name (no parentheses, no qualifiers, no module prefixes), wrapped in \boxed{...}. Example: `\boxed{salted_hmac}`. Output the boxed name ONLY -- no explanation, no other text.

user: ```python
#!/usr/bin/env python
# -*- coding: utf-8 -*-
import tornado.ioloop
from tornado.web import Application, RequestHandler, asynchronous
from tornado.ioloop import IOLoop
from ner import Ner
import time
import json
import sys
import logging
from conf import INLINKS_THRESHOLD
    
# Main class
class NerService(tornado.web.RequestHandler):
        
    def initialize(self, concepts_inlinks, stopwords, inlinks_threshold=400, MAX_WORDS=400, MAX_CHARS=2000):
        """
        """
        self.MAX_WORDS = MAX_WORDS
        self.MAX_CHARS = MAX_CHARS
        self.inlinks_threshold=inlinks_threshold
        self.ner = Ner(concepts_inlinks, stopwords, inlinks_threshold=inlinks_threshold, max_words=MAX_WORDS)
        
    def get(self):
        # Get parameters
        inlinks_threshold = int(self.get_argument("inlinks_threshold", default=self.inlinks_threshold))
        self.ner.inlinks_threshold=inlinks_threshold
        text = self.get_argument("text")
        debug = self.get_argument("debug", default=False)
        # Check warnings if exists
        warning = []
        if len(text) > self.MAX_CHARS:
            warning.append('Only the first %d chars will be processed. This request is over this limit.' % self.MAX_CHARS)
        if  len(text.split(' ')) > self.MAX_WORDS:
            warning.append('Only the first %d words will be processed. This request is over this limit.' % self.MAX_WORDS)
        result = self.ner.fetch_entities(text)
        # Erase text at response
        del(result['text'])
        # if exists warning, append the flags to the output
        if len(warning) > 0:
            result['warnings'] = warning
        if debug:
            self.write(result)
        else:
            self.write({"concepts": list(result["results"].keys())})

    def post(self):
        results = list()
        for line in str(self.request.body, 'utf8').split('\n'):
            if line: 
                fields = line.split('\t')
                text = fields[0]
                concepts = self.ner.fetch_entities(text)
                concept_names = list(concepts['results'].keys())
                results.append({"text":text, "concepts":concept_names})
        self.write({"response":results})

    def __format_post_result(self, response):
        response_dict = json.loads(response)
        concepts = response_dict['results'].keys()        
        if concepts:
            return ";;".join(concepts)
        else:
            return ""
        

logging.basicConfig(stream=sys.stdout, level=logging.INFO)
# data structures to load inside the data
concepts_inlinks={}
stopwords=set()

# Restrictions
MAX_WORDS = 400
MAX_CHARS = MAX_WORDS * 50

logging.info("Loading concepts...")
with(open('data/pagelinks_all.tsv', encoding='utf-8', errors='ignore')) as concepts_file:
    for concept in concepts_file.readlines():
        parts = concept.split('\t')
        concepts_inlinks[parts[0]]=parts[1]
logging.info("%s concepts loaded." % len(concepts_inlinks))


logging.info("Loading stopwords...")
with(open('data/stopwords.txt', encoding='utf-8', errors='ignore')) as sw_file:
    for sw in sw_file:
        stopwords.add(sw.replace('\n','').lower())
logging.info("%s stopwords loaded." % len(stopwords))

logging.info("Concept service Started")

# run application
app = tornado.web.Application([
    (r"/", NerService, dict(concepts_inlinks = concepts_inlinks, 
                            stopwords = stopwords,
                            inlinks_threshold = INLINKS_THRESHOLD, 
                            MAX_WORDS = MAX_WORDS,
                            MAX_CHARS = MAX_CHARS))])
    

app.listen(sys.argv[1])
IOLoop.instance().start()

    

```

Name the function or class in this code that contains a `CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')` vulnerability.
Answer: post