system: You are an expert security code reviewer. You will be shown a source code file. Your task is to name the single function or class that contains the specified CWE vulnerability.

OUTPUT FORMAT: Respond with the exact function or class name (no parentheses, no qualifiers, no module prefixes), wrapped in \boxed{...}. Example: `\boxed{salted_hmac}`. Output the boxed name ONLY -- no explanation, no other text.

user: ```python
from __future__ import division
from jinja2 import Environment, FileSystemLoader
from amonone.core import settings
from amonone.web.settings import TEMPLATES_DIR
from amonone import __version__
from datetime import datetime, time
from amonone.utils.dates import ( 
	utc_unixtime_to_localtime,
	dateformat_local,
	dateformat,
	timeformat
)
from amonone.web.libs.jinja2htmlcompress import SelectiveHTMLCompress
import re

try:
	import json
except:
	import simplejson as json

def age(from_date, since_date = None, target_tz=None, include_seconds=False):
	'''
	Returns the age as a string
	'''
	if since_date is None:
		since_date = datetime.now(target_tz)

	distance_in_time = since_date - from_date
	distance_in_seconds = int(round(abs(distance_in_time.days * 86400 + distance_in_time.seconds)))
	distance_in_minutes = int(round(distance_in_seconds/60))

	if distance_in_minutes <= 1:
		if include_seconds:
			for remainder in [5, 10, 20]:
				if distance_in_seconds < remainder:
					return "less than %s seconds" % remainder
			if distance_in_seconds < 40:
				return "half a minute"
			elif distance_in_seconds < 60:
				return "less than a minute"
			else:
				return "1 minute"
		else:
			if distance_in_minutes == 0:
				return "less than a minute"
			else:
				return "1 minute"
	elif distance_in_minutes < 45:
		return "%s minutes" % distance_in_minutes
	elif distance_in_minutes < 90:
		return "about 1 hour"
	elif distance_in_minutes < 1440:
		return "about %d hours" % (round(distance_in_minutes / 60.0))
	elif distance_in_minutes < 2880:
		return "1 day"
	elif distance_in_minutes < 43220:
		return "%d days" % (round(distance_in_minutes / 1440))
	elif distance_in_minutes < 86400:
		return "about 1 month"
	elif distance_in_minutes < 525600:
		return "%d months" % (round(distance_in_minutes / 43200))
	elif distance_in_minutes < 1051200:
		return "about 1 year"
	else:
		return "over %d years" % (round(distance_in_minutes / 525600))


# Custom filters
def time_in_words(value):
	'''
	Usage: {{ my_date_variable|time_in_words }}
	'''
	# if DateTimeFiled() or datetime.datetime variable
	try:
		time_ago = age(value)
	except:
		null_time = time()
		time_ago = age(datetime.combine(value, null_time))

	return time_ago


def date_to_js(value, format='%Y, %m, %d, %H, %M'):
	# Converts unixtime to a javascript Date list
	_ = datetime.utcfromtimestamp(value)
	js_time_list = _.strftime(format).split(',')
	# Substract one month in js January is 0, February is 1, etc.
	js_time_list[1] = str(int(js_time_list[1])-1) 

	return ",".join(js_time_list) 

def to_int(value):
	number = re.compile('(\d+)')

	try:
		_int = number.search(value).group(1)
	except:
		_int = 0

	return int(_int)

# TODO - write tests
def extract_days_from_unixdate(value, days):
	day = 86400 # 1 day in seconds

	return value-(day*days)

# Removes the letters from a string
# From 24.5MB -> 24.5 -> used in the progress width
def clean_string(variable):

	if isinstance(variable, int)\
	or isinstance(variable, float)\
	or isinstance(variable, long):
		
		variable = float(variable) if not isinstance(variable, float) else variable

		return variable

	else:

		value_regex = re.compile(r'\d+[\.,]\d+') 
		extracted_value = value_regex.findall(variable)

		if len(extracted_value) > 0:
			extracted_value = extracted_value[0]
			extracted_value.replace(",",".")
			extracted_value = float(extracted_value)
		else:
			extracted_value = 0

		return extracted_value


# Used in the charts, where a disk drive could be with several slashes
def clean_slashes(string):
	return re.sub('[^A-Za-z0-9]+', '', string).strip().lower()


def check_additional_data(list_with_dicts):
	valid_keys = ['occurrence']

	for dict in list_with_dicts:
		for key in dict.keys():
			if key not in valid_keys:
				return True


# Combine several parameters with /
# Used in the base_url -> {{ base_url|url('system',) -> http://host/system
def url(*args):
	http_slash = '/'
	url = http_slash.join(args)

	return url


def beautify_json(value):
	if isinstance(value, dict):
		return json.dumps(value, indent=4) # Remove the unicode symbol
	else:
		return value

# Used in the log page. Displays the expand button if the value is dictionary
def is_dict(value):
	if isinstance(value, dict):
		return True
	else:
		return False

# Used in the log page. Checks the log tag
def is_str(value):
	if isinstance(value, str) or isinstance(value, unicode):
		return True
	else:
		return False

def get_active_page(value, key):
	elements = value.split(':')

	try:
		return elements[key]
	except:
		return None


# url -> usually the base url -> http://something.com
# params_dict -> dict {"tags": ['test', 'some'], "other_param": ['test']}
def query_dict(url, params_dict, page=None):

	query_lists = []
	for dict in params_dict:
		dict_items = []
		values_list = params_dict[dict]
		if values_list:
			for value in values_list:
				dict_items.append("{0}={1}".format(dict, value))
			# Join all the values
			query_lists.append("&".join(dict_items))

	# Finally separate the different params with ?
	query_string = url

	if len(query_lists) > 0:
		query_string+='?'
		query_string+= "?".join(query_lists)
		if page != None:
			query_string+="&page={0}".format(page)
	# No params - only the page number
	else:
		if page != None:
			query_string+="?page={0}".format(page)

	return query_string


def base_url():

	if settings.PROXY is None:
		host = settings.WEB_APP['host']
		port = settings.WEB_APP['port']

		base_url = "{0}:{1}".format(host, port)

		return base_url
	else:
		return ''

# Removes the scientific notation and displays floats normally
def format_float(value):
	return format(float(value), "g")

# Converts bytes in megabytes
def to_mb(value):
	value = value/(1024*1024)

	return "{0:.2F}MB".format(float(value))

def dehumanize(value):

	values_dict = {
			"more_than": "&gt;",
			"less_than": "&lt;",
			"minute": "1 minute",
			"five_minutes": "5 minutes",
			"fifteen_minutes": "15 minutes"
			}

	try:
		_value = values_dict[value]
	except: 
		_value = ''

	return _value

# Gets the key from a dictionary, doesn't break the template
def get_key(dict, key):
	value = dict.get(key, None)
	
	return value

def render(template, *args, **kwargs):

	env = Environment(loader=FileSystemLoader(TEMPLATES_DIR),
		extensions=[SelectiveHTMLCompress])

	env.globals['base_url'] = base_url()
	env.globals['version'] = __version__

	env.filters['url'] = url

	# Used everywhere
	env.filters['time'] = timeformat
	env.filters['date_to_js'] = date_to_js
	env.filters['date'] = dateformat
	env.filters['date_local'] = dateformat_local
	env.filters['to_int'] =  to_int
	env.filters['time_in_words'] = time_in_words 
	env.filters['test_additional_data'] = check_additional_data
	env.filters['clean_slashes'] = clean_slashes
	env.filters['beautify_json'] = beautify_json
	env.filters['get_active_page'] = get_active_page # Used to mark links as active
	env.filters['extract_days_from_unixdate'] = extract_days_from_unixdate

	# Dashboard filters
	env.filters['format_float'] = format_float

	# Log filters
	env.filters['is_dict'] = is_dict
	env.filters['is_str'] = is_str
	env.filters['query_dict'] = query_dict

	# Settings
	env.filters['dehumanize'] = dehumanize
	env.filters['to_mb'] = to_mb

	# ACL

	# Utilities
	env.filters['get_key'] = get_key

	try:
		template = env.get_template(template)
	except Exception, e:
		raise

	# Global variables
	env.globals['acl'] = settings.ACL

	return template.render(*args, **kwargs)


```

Name the function or class in this code that contains a `CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')` vulnerability.
Answer: render