Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"#000000")}function P(u){return null!=u?mxConstants.STYLE_FILLCOLOR+"="+V(u)+";":""}function Q(u){return null!=u?"swimlaneFillColor="+V(u)+";":""}function R(u,F,C){F="";if("string"===typeof u.LineColor&&(u.LineColor=T(u.LineColor),7<u.LineColor.length)){var t="0x"+u.LineColor.substring(u.LineColor.length-2,u.LineColor.length);C.style.includes("strokeOpacity")||(F+="strokeOpacity="+Math.round(parseInt(t)/2.55)+";")}"string"===typeof u.FillColor&&(u.FillColor=T(u.FillColor),7<u.FillColor.length&&(u=
"0x"+u.FillColor.substring(u.FillColor.length-2,u.FillColor.length),C.style.includes("fillOpacity")||(F+="fillOpacity="+Math.round(parseInt(u)/2.55)+";")));return F}function ha(u,F,C){var t="";if(null!=u.Rotation){u=mxUtils.toDegree(parseFloat(u.Rotation));var e=!0;0!=u&&F.Class&&("UMLSwimLaneBlockV2"==F.Class||(0<=F.Class.indexOf("Rotated")||-90==u||270==u)&&(0<=F.Class.indexOf("Pool")||0<=F.Class.indexOf("SwimLane")))?(u+=90,C.geometry.rotate90(),C.geometry.isRotated=!0,e=!1):0<=mxUtils.indexOf(vf,