Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d.applyStyle(c,this):a?null:this.getStyleColor(c);c=b.getQuickStyleVariation();if(null!=a&&0<(c&8)){c=this.getStyleColor(8).toHsl();b=this.getLineColor$com_mxgraph_io_vsdx_theme_QuickStyleVals(b);d=b.toHsl();var f=a.toHsl();.1666<=Math.abs(c.getLum()-f.getLum())||(.7292>=c.getLum()?a=new h.mxgraph.io.vsdx.theme.Color(255,255,255):Math.abs(c.getLum()-d.getLum())>Math.abs(c.getLum()-f.getLum())&&(a=b))}return a};g.prototype.getFillColor=function(b,a){if(!(null!=b&&b instanceof h.mxgraph.io.vsdx.theme.QuickStyleVals||
null===b)||"boolean"!==typeof a&&null!==a){if((null!=b&&b instanceof h.mxgraph.io.vsdx.theme.QuickStyleVals||null===b)&&void 0===a)return this.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals(b);throw Error("invalid overload");}return this.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals$boolean(b,a)};g.prototype.getLineStyle=function(b,a){this.processTheme();var c=null;switch(b){case 1:case 2:case 3:case 4:case 5:case 6:c=a[b-1];break;case 100:case 101:case 102:case 103:c=a===this.lineStyles?