Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Oa[Qa]);0<=Ta&&ka.splice(Ta,1)}}}}}var ta=m.isEdge(aa);V=ta?M:C;var Aa=m.getStyle(aa);for(pa=0;pa<ka.length;pa++){Ba=ka[pa];var Ea=V[Ba];null!=Ea&&"edgeStyle"!=Ba&&("shape"!=Ba||ta)&&(!ta||ba||0>mxUtils.indexOf(T,Ba))&&(Aa=mxUtils.setStyle(Aa,Ba,Ea))}Editor.simpleLabels&&(Aa=mxUtils.setStyle(mxUtils.setStyle(Aa,"html",null),"whiteSpace",null));m.setStyle(aa,Aa)}}finally{m.endUpdate()}return Q};y.addListener("cellsInserted",function(Q,Y){f(Y.getProperty("cells"),null,null,null,null,!0,!0)});y.addListener("textInserted",