Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null==V.getTerminal(k[y],!0)){V.setTerminal(k[y],D,!0);var G=e.getCellGeometry(k[y]);G.points=null;null!=G.getTerminalPoint(!0)&&G.setTerminalPoint(null,!0)}}finally{V.endUpdate()}return k}}var I={67:c.actions.get("selectChildren"),88:c.actions.get("selectDescendants"),80:c.actions.get("selectParent"),83:c.actions.get("selectSiblings")},A=c.onKeyDown;c.onKeyDown=function(D){try{var M=e.getSelectionCell();if(e.isEnabled()&&!e.isEditing()&&null!=M){var K=mxEvent.isAltDown(D)&&mxEvent.isShiftDown(D)?