Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(b,a){this.processTheme();var c=b.getQuickStyleFillColor(),d=null;switch(b.getQuickStyleFillMatrix()){case 1:case 2:case 3:case 4:case 5:case 6:d=this.fillStyles[b.getQuickStyleFillMatrix()-1];break;case 100:case 101:case 102:case 103:this.isMonotoneVariant[this.themeVariant]&&(c=100),d=b.getQuickStyleFillMatrix()-100,d=this.fillStyles[this.variantFillIdx[this.themeVariant][d]-1]}a=null!=d?a?null!=d&&d instanceof h.mxgraph.io.vsdx.theme.GradFill?d.applyStyle(c,this).getGradientClr():null:
d.applyStyle(c,this):a?null:this.getStyleColor(c);c=b.getQuickStyleVariation();if(null!=a&&0<(c&8)){c=this.getStyleColor(8).toHsl();b=this.getLineColor$com_mxgraph_io_vsdx_theme_QuickStyleVals(b);d=b.toHsl();var f=a.toHsl();.1666<=Math.abs(c.getLum()-f.getLum())||(.7292>=c.getLum()?a=new h.mxgraph.io.vsdx.theme.Color(255,255,255):Math.abs(c.getLum()-d.getLum())>Math.abs(c.getLum()-f.getLum())&&(a=b))}return a};g.prototype.getFillColor=function(b,a){if(!(null!=b&&b instanceof h.mxgraph.io.vsdx.theme.QuickStyleVals||