Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxConstants.GUIDE_STROKEWIDTH);K.dialect=mxConstants.DIALECT_SVG;K.pointerEvents=!1;K.init(R.graph.getView().getOverlayPane());return K};S=function(K,O){if(K&&null!=R.guidesArrHor)for(K=0;K<R.guidesArrHor.length;K++)R.guidesArrHor[K].node.style.visibility="hidden";if(O&&null!=R.guidesArrVer)for(K=0;K<R.guidesArrVer.length;K++)R.guidesArrVer[K].node.style.visibility="hidden"};if(1<A&&A==q.length-1){A=[];n=R.guidesArrHor;N=[];L=0;p=q[0]==J?1:0;C=q[p].y+q[p].height;if(0<l)for(p=0;p<q.length-1;p++)c=