Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
12],yy:String(R).slice(2),yyyy:R,h:W%12||12,hh:E(W%12||12),H:W,HH:E(W),M:d,MM:E(d),s:f,ss:E(f),l:E(N,3),L:E(99<N?Math.round(N/10):N),t:12>W?"a":"p",tt:12>W?"am":"pm",T:12>W?"A":"P",TT:12>W?"AM":"PM",Z:g?"UTC":(String(b).match(y)||[""]).pop().replace(q,""),o:(0<k?"-":"+")+E(100*Math.floor(Math.abs(k)/60)+Math.abs(k)%60,4),S:["th","st","nd","rd"][3<T%10?0:(10!=T%100-T%10)*T%10]};return e.replace(/d{1,4}|m{1,4}|yy(?:yy)?|([HhMsTt])\1?|[LloSZ]|"[^"]*"|'[^']*'/g,function(z){return z in v?v[z]:z.slice(1,