Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
m?H=new mxHierarchicalLayout(v,mxConstants.DIRECTION_WEST):"circle"==m?H=new mxCircleLayout(v):(H=new mxFastOrganicLayout(v,!1),H.forceConstant=80);if(null!=H){var R=function(g,q){v.getModel().beginUpdate();try{null!=g&&g(),H.execute(v.getDefaultParent(),N)}catch(p){throw p;}finally{g=new mxMorphing(v),g.addListener(mxEvent.DONE,mxUtils.bind(this,function(){v.getModel().endUpdate();null!=q&&q()})),g.startAnimation()}},J=mxEdgeHandler.prototype.connect;mxEdgeHandler.prototype.connect=function(g,q,