Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
L?L:G;var V=q.getModel();if(q.isEnabled()&&!q.isSelectionEmpty()&&null!=n.copiedValue){V.beginUpdate();try{var d=q.getEditableCells(q.getSelectionCells());if(0==d.length)R(V.getRoot(),n.copiedValue);else for(L=0;L<d.length;L++)R(d[L],n.copiedValue)}finally{V.endUpdate()}}},null,null,"Alt+Shift+E");this.addAction("delete",function(G,L){G=null!=L?L:G;null!=G&&mxEvent.isShiftDown(G)?e():b(null!=G&&(mxEvent.isControlDown(G)||mxEvent.isMetaDown(G)||mxEvent.isAltDown(G)))},null,null,"Delete");this.addAction("deleteAll",