Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(function(h){(function(y){(function(A){(function(B){var m=function(){function g(){this.colorElementMap={};this.fontElementMap={}}g.__static_initialize=function(){g.__static_initialized||(g.__static_initialized=!0,g.__static_initializer_0())};g.defaultColors_$LI$=function(){g.__static_initialize();null==g.defaultColors&&(g.defaultColors={});return g.defaultColors};g.__static_initializer_0=function(){g.defaultColors_$LI$()["0"]="#000000";g.defaultColors_$LI$()["1"]="#FFFFFF";g.defaultColors_$LI$()["2"]=