Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
la&&Math.abs(this.scrollTop-oa.container.scrollTop)<la&&Math.abs(this.startX-va.getGraphX())<la&&Math.abs(this.startY-va.getGraphY())<la&&P(va.getEvent()));this.clear()},activate:function(sa){this.currentLink=oa.getAbsoluteUrl(oa.getLinkForCell(sa.cell));null!=this.currentLink&&(this.currentTarget=oa.getLinkTargetForCell(sa.cell),oa.container.style.cursor="pointer",null!=this.highlight&&this.highlight.highlight(sa))},clear:function(){null!=oa.container&&(oa.container.style.cursor=ea);this.currentLink=