Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
e.getCell(g),null!=d&&d!=I&&(I=null));null!=I&&(e.getChildAt(f,y)!=I&&e.add(f,I,y),this.patchCellRecursive(b,e,I,c,k),y++);return g});for(D=[null];0<D.length;)if(z=D.shift(),z=E(null!=z?z.child:null,null!=z?z.insert:!1),M=l[z],null!=M&&(delete l[z],D.push({child:e.getCell(M)})),M=x[z],null!=M&&(delete x[z],D.push({child:this.getCellForJson(M),insert:!0})),0==D.length){for(z in l)D.push({child:e.getCell(l[z])}),delete l[z];for(z in x)D.push({child:this.getCellForJson(x[z]),insert:!0}),delete x[z]}}};