Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
za,this.stylesheet=ea,this.refresh());return Ba};var I=mxCellRenderer.prototype.destroy;mxCellRenderer.prototype.destroy=function(k){I.apply(this,arguments);null!=k.secondLabel&&(k.secondLabel.destroy(),k.secondLabel=null)};mxCellRenderer.prototype.getShapesForState=function(k){return[k.shape,k.text,k.secondLabel,k.control]};var A=mxGraphView.prototype.resetValidationState;mxGraphView.prototype.resetValidationState=function(){A.apply(this,arguments);this.enumerationState=0};var S=mxGraphView.prototype.stateValidated;