Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null===b)return this.getIndex$org_w3c_dom_Element(b);if(void 0===b)return this.getIndex$();throw Error("invalid overload");};g.prototype.processGeoElem=function(b){var a=h.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildNamedElements(b,"Cell");b=h.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildNamedElements(b,"Row");if(null==this.rows){this.rows=[];for(var c=0;c<b.length;c++)this.rows.push(null)}for(c=0;c<a.length;c++){var d=a[c],f=d.getAttribute("N");d=d.getAttribute("V");switch(f){case "NoFill":this.noFill=
function(k,n){return k&&k.equals?k.equals(n):k===n}("1",d);break;case "NoLine":this.noLine=function(k,n){return k&&k.equals?k.equals(n):k===n}("1",d);break;case "NoShow":this.noShow=function(k,n){return k&&k.equals?k.equals(n):k===n}("1",d);break;case "NoSnap":this.noSnap=function(k,n){return k&&k.equals?k.equals(n):k===n}("1",d);break;case "NoQuickDrag":this.noQuickDrag=function(k,n){return k&&k.equals?k.equals(n):k===n}("1",d)}}a=this.rows.length;c=!1;for(f=0;f<b.length;f++)d=h.mxgraph.io.vsdx.geometry.RowFactory.getRowObj(b[f],
this.rows),d.getIndex()>a?(this.rows.push(d),c=!0):this.rows[d.getIndex()-1]=d;c&&function(k,n){n.compare?k.sort(function(p,x){return n.compare(p,x)}):k.sort(n)}(this.rows,new g.mxVsdxGeometry$0(this))};g.prototype.inheritGeo=function(b){this.noFill=b.noFill;this.noLine=b.noLine;this.noShow=b.noShow;this.noSnap=b.noSnap;this.noQuickDrag=b.noQuickDrag;var a=this.rows=[];a.push.apply(a,b.rows)};g.prototype.getIndex$=function(){return this.index};g.prototype.isNoFill=function(){return this.noFill};g.prototype.isNoLine=