Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
C.style=mxUtils.setStyle(mxUtils.setStyle(F.style,"container","1"),"collapsible","0");F.removeFromParent()}}}function Df(){var u=new Graph;u.setExtendParents(!1);u.setExtendParentsOnAdd(!1);u.setConstrainChildren(!1);u.setHtmlLabels(!0);u.getModel().maintainEdgeParent=!1;return u}function Qd(u,F,C,t,e,N,r,q){this.nurbsValues=[1,3,0,0,100*(u+C),100-100*(1-(F+t)),0,1,100*(e+r),100-100*(1-(N+q)),0,1]}function Ke(u,F){try{for(var C=[],t=F.BoundingBox.w,e=F.BoundingBox.h,N=0;N<F.Shapes.length;N++){var r=