Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null==T.getTerminal(m[B],!0)){T.setTerminal(m[B],G,!0);var K=g.getCellGeometry(m[B]);K.points=null;null!=K.getTerminalPoint(!0)&&K.setTerminalPoint(null,!0)}}finally{T.endUpdate()}return m}}var L={67:d.actions.get("selectChildren"),88:d.actions.get("selectDescendants"),80:d.actions.get("selectParent"),83:d.actions.get("selectSiblings")},F=d.onKeyDown;d.onKeyDown=function(G){try{var P=g.getSelectionCell();if(g.isEnabled()&&!g.isEditing()&&null!=P){var O=mxEvent.isAltDown(G)&&mxEvent.isShiftDown(G)?