Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
""}function Fe(u,F,C,t,e,N){if(null!=F&&null!=F.LinkX&&null!=F.LinkY&&(F.LinkX=Math.round(1E3*F.LinkX)/1E3,F.LinkY=Math.round(1E3*F.LinkY)/1E3,null!=N&&N.style&&-1<N.style.indexOf("flipH=1")&&(F.LinkX=1-F.LinkX),null!=N&&N.style&&-1<N.style.indexOf("flipV=1")&&(F.LinkY=1-F.LinkY),u.style+=(t?"":(C?"exitX":"entryX")+"="+F.LinkX+";")+(e?"":(C?"exitY":"entryY")+"="+F.LinkY+";")+(C?"exitPerimeter":"entryPerimeter")+"=0;",F.Inside))return"["+F.LinkX+","+F.LinkY+",0]"}function He(u,F,C,t,e){try{var N=function(ma,
Ba){if(null!=ma)if(Array.isArray(ma))for(var Pa=0;Pa<ma.length;Pa++)N(ma[Pa].p?ma[Pa].p:ma[Pa],Ba);else Ba=Ba?.75:1,q=Math.min(q,ma.x*Ba),Z=Math.min(Z,ma.y*Ba),aa=Math.max(aa,(ma.x+(ma.width?ma.width:0))*Ba),U=Math.max(U,(ma.y+(ma.height?ma.height:0))*Ba)};null!=u.Action&&null!=u.Action.Properties&&(u=u.Action.Properties);var r=new mxCell("",new mxGeometry,"group;dropTarget=0;pointerEvents=0;");r.vertex=!0;r.zOrder=u.ZOrder;var q=Infinity,Z=Infinity,aa=-Infinity,U=-Infinity,wa=u.Members;e=[];for(var ja in wa){var na=