Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
try{var t=function(Ca,ua){function Na(Ra,la,Ma){null==Ra||Ra.generated||(Ra.x-=la,Ra.y-=Ma)}var Ka=null!=ua.Endpoint1.Block?N[ua.Endpoint1.Block]:null,La=null!=ua.Endpoint2.Block?N[ua.Endpoint2.Block]:null,l=yf(Ca,u,Ka,La);if(ua.Endpoint1&&ua.Endpoint1.Line||ua.Endpoint2&&ua.Endpoint2.Line)console.log("Edge to Edge case"),LucidImporter.hasUnknownShapes=!0;null==Ka&&null!=ua.Endpoint1&&l.geometry.setTerminalPoint(new mxPoint(Math.round(.75*ua.Endpoint1.x),Math.round(.75*ua.Endpoint1.y)),!0);null==
La&&null!=ua.Endpoint2&&l.geometry.setTerminalPoint(new mxPoint(Math.round(.75*ua.Endpoint2.x),Math.round(.75*ua.Endpoint2.y)),!1);Ca=r[Ca.id];if(null!=Ca){for(var Ia=l.geometry,bb=ua=0,Ea=Ca;null!=Ea&&null!=Ea.geometry;)ua+=Ea.geometry.x,bb+=Ea.geometry.y,Ea=Ea.parent;Na(Ia.sourcePoint,ua,bb);Na(Ia.targetPoint,ua,bb);Na(Ia.offset,ua,bb);Ia=Ia.points;if(null!=Ia)for(Ea=0;Ea<Ia.length;Ea++)Na(Ia[Ea],ua,bb)}e.push(u.addCell(l,Ca,null,Ka,La))},e=[],N={},r={},q={},Z=[];null!=F.Lines&&(q=F.Lines);if(null!=