Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Ra.shape.node.parentNode.firstChild);Ra.redraw=function(){if(null!=this.shape){this.shape.stroke=0==lb?mxConstants.NONE:xa.stroke;if(this.shape.constructor==Y)this.shape.line=L(Na[bb],0,lb),this.shape.updateBoundsFromLine();else{var Pa=X.getActualStartSize(oa.cell,!0);this.shape.bounds.height=1;this.shape.bounds.y=this.state.y+this.state.height+lb*la;this.shape.bounds.x=oa.x+(bb==Fa.length-1?0:Pa.x*la);this.shape.bounds.width=oa.width-(bb==Fa.length-1?0:Pa.width+Pa.x+la)}this.shape.redraw()}};var kb=