Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n.length,b.x+(T?q.x:0),b.y+(T?q.y:0));F.push(W);T=W}g=F}};Graph.prototype.getTableLines=function(b,e,g){var n=[],y=[];(e||g)&&this.visitTableCells(b,mxUtils.bind(this,function(q,E,N,T,F){e&&q.row<N-1&&(null==n[q.row]&&(n[q.row]=[new mxPoint(T,q.point.y)]),1<q.rowspan&&n[q.row].push(null),n[q.row].push(q.point));g&&q.col<E-1&&(null==y[q.col]&&(y[q.col]=[new mxPoint(q.point.x,F)]),1<q.colspan&&y[q.col].push(null),y[q.col].push(q.point))}));return n.concat(y)};