Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
O.cell.id,O.text),K=!1);K||D++;M++});console.log("states checked",M,"invalid",D)}));d.actions.addAction("testCheckFile",mxUtils.bind(this,function(){var l=null!=d.pages&&null!=d.getCurrentFile()?d.getCurrentFile().getAnonymizedXmlForPages(d.pages):"";l=new TextareaDialog(d,"Paste Data:",l,function(n){if(0<n.length)try{var z=function(O){function V(Y){if(null==X[Y]){if(X[Y]=!0,null!=G[Y]){for(;0<G[Y].length;){var Z=G[Y].pop();V(Z)}delete G[Y]}}else mxLog.debug(k+": Visited: "+Y)}var k=O.parentNode.id,