Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){return this.noLine};g.prototype.isNoShow=function(){return this.noShow};g.prototype.isNoSnap=function(){return this.noSnap};g.prototype.isNoQuickDrag=function(){return this.noQuickDrag};g.prototype.getRows=function(){return this.rows};g.prototype.getPathXML=function(b,a){if(this.noShow)return"";for(var c="",d=0;d<this.rows.length;d++){var f=this.rows[d];c=c.concat(null!=f?f.handle(b,a):"")}return c};return g}();B.mxVsdxGeometry=m;m.__class="com.mxgraph.io.vsdx.mxVsdxGeometry";(function(g){var b=