Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
getValue:function(){return this.value}})}(this.connects,n.getFromSheet(),n)}f=f.nextSibling}}d=d.nextSibling}for(d=b.firstChild;null!=d;)null!=d&&1==d.nodeType&&(f=d,k=f.nodeName,function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Rel")?this.resolveRel(f,a,c):function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Shapes")?this.shapes=this.parseShapes(f,null,!1):function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"PageSheet")&&(this.pageSheet=f)),d=d.nextSibling};g.prototype.resolveRel=function(b,
a,c){c=a.getRelationship(b.getAttribute("r:id"),h.mxgraph.io.mxVsdxCodec.vsdxPlaceholder+"/pages/_rels/"+c+".xml.rels");b=c.getAttribute("Target");c=c.getAttribute("Type");if(function(f,k){var n=f.length-k.length;f=f.indexOf(k,n);return-1!==f&&f===n}((new String(c)).toString(),"page")){var d=null;null!=c&&function(f,k){var n=f.length-k.length;f=f.indexOf(k,n);return-1!==f&&f===n}(c,"page")&&(d=a.getXmlDoc(h.mxgraph.io.mxVsdxCodec.vsdxPlaceholder+"/pages/"+b));if(null!=d)for(c=d.firstChild;null!=c;){if(null!=
c&&1==c.nodeType&&function(f,k){return f&&f.equals?f.equals(k):f===k}(c.tagName,"PageContents")){d=b.indexOf(".");-1!==d&&this.parseNodes(c,a,b.substring(0,d));break}c=c.nextSibling}}};g.prototype.parseShapes=function(b,a,c){c={};b=b.getElementsByTagName(h.mxgraph.io.vsdx.mxVsdxConstants.SHAPE);for(b=null!=b&&0<b.length?b.item(0):null;null!=b;){if(null!=b&&1==b.nodeType){var d=b,f=a;if(null==f){var k=d.getAttribute(h.mxgraph.io.vsdx.mxVsdxConstants.MASTER);null==k||function(p,x){return p&&p.equals?