Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[];null==M.entries&&(M.entries=[]);for(var H=0;H<M.entries.length;H++)L.push(M.entries[H].value);return L}(f.vsdxModel.getPages())).next();if(null!=p){var z={str:"",toString:function(){return this.str}},E=0===n.length?"":",",I=function(M){return Object.keys(M).map(function(L){return M[L]})}(p);n=function(M){M=I[M];var L=J.createMxGraph(),H=1;if(null!=M.pageSheet){var K=H=1,P=M.pageSheet.DrawingScale;null!=P&&(H=parseFloat(P.getAttribute("V"))||1);P=M.pageSheet.PageScale;null!=P&&(K=parseFloat(P.getAttribute("V"))||