Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if(null!=C.v&&"il"==C.n)return"spacingLeft="+A(.75*C.v)+";";F++}return""}function J(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("ir"==C.n&&null!=C.v)return"spacingRight="+A(.75*C.v)+";";F++}return""}function O(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("mt"==C.n&&null!=C.v)return"spacingTop="+A(.75*C.v)+";";F++}return""}function M(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("mb"==C.n&&null!=C.v)return"spacingBottom="+
A(.75*C.v)+";";F++}return""}function L(u){return"number"===typeof u.InsetMargin?"spacing="+Math.max(0,A(.75*u.InsetMargin))+";":""}function H(u){return null!=u.Text_VAlign&&"string"===typeof u.Text_VAlign?"verticalAlign="+u.Text_VAlign+";":null!=u.Title_VAlign&&"string"===typeof u.Title_VAlign?"verticalAlign="+u.Title_VAlign+";":Zb(mxConstants.STYLE_VERTICAL_ALIGN,u.TextVAlign,"middle")}function K(u,F){return 0==u.LineWidth?mxConstants.STYLE_STROKECOLOR+"=none;":Zb(mxConstants.STYLE_STROKECOLOR,V(u.LineColor),