Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0,0,0,p,0)),c.lineTo(p,t-B),c.arcTo(.5*p,B,0,0,1,.5*p,t),c.arcTo(.5*p,B,0,0,1,0,t-B),c.close(),c.fillAndStroke(),c.setShadow(!1),D&&(c.begin(),c.moveTo(p,B),c.arcTo(.5*p,B,0,0,1,.5*p,2*B),c.arcTo(.5*p,B,0,0,1,0,B),c.stroke()))};mxCellRenderer.registerShape("cylinder3",d);mxUtils.extend(f,mxActor);f.prototype.redrawPath=function(c,l,u,p,t){c.moveTo(0,0);c.quadTo(p/2,.5*t,p,0);c.quadTo(.5*p,t/2,p,t);c.quadTo(p/2,.5*t,0,t);c.quadTo(.5*p,t/2,0,0);c.end()};mxCellRenderer.registerShape("switch",f);mxUtils.extend(k,