Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
t.setAttribute("disabled","disabled")}));mxUtils.br(c);return{getLink:function(){return g.checked?"blank"===t.value?"_blank":p:null},getEditInput:function(){return g},getEditSelect:function(){return t}}};EditorUi.prototype.addLinkSection=function(c,e){function g(){var B=document.createElement("div");B.style.width="100%";B.style.height="100%";B.style.boxSizing="border-box";null!=t&&t!=mxConstants.NONE?(B.style.border="1px solid black",B.style.backgroundColor=t):(B.style.backgroundPosition="center center",