Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"#000000")),ta=mxUtils.setStyle(ta,mxConstants.STYLE_GRADIENTCOLOR,mxUtils.getValue(oa,mxConstants.STYLE_GRADIENTCOLOR,null)),R.getModel().isVertex(ya[xa])&&(ta=mxUtils.setStyle(ta,mxConstants.STYLE_FONTCOLOR,mxUtils.getValue(oa,mxConstants.STYLE_FONTCOLOR,null))));R.getModel().setStyle(ya[xa],ta)}}finally{R.getModel().endUpdate()}}));ba.className="geStyleButton";ba.style.width="36px";ba.style.height=10>=this.defaultColorSchemes.length?"24px":"30px";ba.style.margin="0px 6px 6px 0px";if(null!=Ca){var fa=
Editor.isDarkMode()?"2px solid":"1px solid";null!=Ca.border&&(fa=Ca.border);null!=Ca.gradient?mxClient.IS_IE&&10>document.documentMode?ba.style.filter="progid:DXImageTransform.Microsoft.Gradient(StartColorStr='"+Ca.fill+"', EndColorStr='"+Ca.gradient+"', GradientType=0)":ba.style.backgroundImage="linear-gradient("+Ca.fill+" 0px,"+Ca.gradient+" 100%)":Ca.fill==mxConstants.NONE?ba.style.background="url('"+Dialog.prototype.noColorImage+"')":ba.style.backgroundColor=""==Ca.fill?mxUtils.getValue(R.defaultVertexStyle,
mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff"):Ca.fill||mxUtils.getValue(R.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff");ba.style.border=Ca.stroke==mxConstants.NONE?fa+" transparent":""==Ca.stroke?fa+" "+mxUtils.getValue(R.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?"#ffffff":Editor.darkColor):fa+" "+(Ca.stroke||mxUtils.getValue(R.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?
"#ffffff":Editor.darkColor));null!=Ca.title&&ba.setAttribute("title",Ca.title)}else{fa=mxUtils.getValue(R.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,"#ffffff");var qa=mxUtils.getValue(R.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,"#000000");ba.style.backgroundColor=fa;ba.style.border="1px solid "+qa}ba.style.borderRadius="0";U.appendChild(ba)});U.innerText="";for(var Ba=0;Ba<ea.length;Ba++)0<Ba&&0==mxUtils.mod(Ba,4)&&mxUtils.br(U),za(ea[Ba])});null==this.format.currentScheme?Z(Math.min(V.length-