Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n.x)/100),Math.floor(Math.round(100*n.y)/100),Math.floor(Math.round(100*f.x)/100),Math.floor(Math.round(100*f.y)/100),x)}a=n.geometry.height;for(z=function(J){var O=0;return{next:function(){return O<J.length?J[O++]:null},hasNext:function(){return O<J.length}}}(function(J){null==J.entries&&(J.entries=[]);return J.entries}(z));z.hasNext();)if(x=z.next().getValue(),E=x.getId(),x.isVertex()){var I=h.mxgraph.io.vsdx.VsdxShape.getType(x.getShape());null!=I&&(function(J,O){return J&&J.equals?J.equals(O):