Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
L);x[la].setAttribute("height",P);break}}};Graph.prototype.insertLink=function(x){if(null!=this.cellEditor.textarea)if(0==x.length)document.execCommand("unlink",!1);else if(mxClient.IS_FF){for(var L=this.cellEditor.textarea.getElementsByTagName("a"),P=[],X=0;X<L.length;X++)P.push(L[X]);document.execCommand("createlink",!1,mxUtils.trim(x));L=this.cellEditor.textarea.getElementsByTagName("a");if(L.length==P.length+1)for(X=L.length-1;0<=X;X--)if(L[X]!=P[X-1]){for(L=L[X].getElementsByTagName("a");0<L.length;){for(P=
L[0].parentNode;null!=L[0].firstChild;)P.insertBefore(L[0].firstChild,L[0]);P.removeChild(L[0])}break}}else document.execCommand("createlink",!1,mxUtils.trim(x))};Graph.prototype.isCellResizable=function(x){var L=mxGraph.prototype.isCellResizable.apply(this,arguments),P=this.getCurrentCellStyle(x);return!this.isTableCell(x)&&!this.isTableRow(x)&&(L||"0"!=mxUtils.getValue(P,mxConstants.STYLE_RESIZABLE,"1")&&"wrap"==P[mxConstants.STYLE_WHITE_SPACE])};Graph.prototype.distributeCells=function(x,L,P){null==