Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
A){var H=A.lastIndexOf(".");0<H&&(A=A.substring(H+1,A.length));null==g[A]&&(g[A]=!0)}}var t=this.editor.graph,u=t.getCellStyle(d);n(mxStencilRegistry.getBasenameForStencil(u[mxConstants.STYLE_SHAPE]));t.model.isEdge(d)&&(n(mxMarker.getPackageForType(u[mxConstants.STYLE_STARTARROW])),n(mxMarker.getPackageForType(u[mxConstants.STYLE_ENDARROW])));u=t.model.getChildCount(d);for(var v=0;v<u;v++)this.addBasenamesForCell(t.model.getChildAt(d,v),g)};EditorUi.prototype.setGraphEnabled=function(d){this.diagramContainer.style.visibility=
d?"":"hidden";this.formatContainer.style.visibility=d?"":"hidden";this.sidebarContainer.style.display=d?"":"none";this.hsplit.style.display=d&&"sketch"!=Editor.currentTheme&&"min"!=Editor.currentTheme?"":"none";this.editor.graph.setEnabled(d);null!=this.tabContainer&&(this.tabContainer.style.visibility=d?"":"hidden");null!=this.ruler&&(this.ruler.hRuler.container.style.visibility=d?"":"hidden",this.ruler.vRuler.container.style.visibility=d?"":"hidden");d||this.hideWindows()};EditorUi.prototype.initializeEmbedMode=