Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(N){return this.isTreeEdge(N)}))};Graph.prototype.getIncomingTreeEdges=function(d,u){return this.getTreeEdges(d,u,!0,!1,!1)};Graph.prototype.getOutgoingTreeEdges=function(d,u){return this.getTreeEdges(d,u,!1,!0,!1)};var f=EditorUi.prototype.init;EditorUi.prototype.init=function(){f.apply(this,arguments);this.editor.isChromelessView()&&!this.editor.editable||this.addTrees()};EditorUi.prototype.addTrees=function(){function d(D){return g.isVertex(D)&&v(D)}function u(D){var M=!1;null!=D&&(M="1"==
e.getCurrentCellStyle(D).treeMoving);return M}function v(D){var M=!1;null!=D&&(D=g.getParent(D),M=e.view.getState(D),M="tree"==(null!=M?M.style:e.getCellStyle(D)).containerType);return M}function E(D){var M=!1;null!=D&&(D=g.getParent(D),M=e.view.getState(D),e.view.getState(D),M=null!=(null!=M?M.style:e.getCellStyle(D)).childLayout);return M}function F(D){D=e.view.getState(D);if(null!=D){var M=e.getIncomingTreeEdges(D.cell);if(0<M.length&&(M=e.view.getState(M[0]),null!=M&&(M=M.absolutePoints,null!=