Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
y.cellEditor.stopEditing=function(Q,Y){try{ma.apply(this,arguments),ca()}catch(m){n.handleError(m)}};y.container.setAttribute("tabindex","0");y.container.style.cursor="default";if(window.self===window.top&&null!=y.container.parentNode)try{y.container.focus()}catch(Q){}var da=y.fireMouseEvent;y.fireMouseEvent=function(Q,Y,m){try{Q==mxEvent.MOUSE_DOWN&&this.container.focus(),da.apply(this,arguments)}catch(C){n.handleError(C)}};var S=y.foldCells;y.foldCells=function(Q,Y,m,C,M){try{S.apply(this,arguments)}catch(ba){n.handleError(ba)}};