Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N.cell.id,N.text),O=!1);O||G++;P++});console.log("states checked",P,"invalid",G)}));c.actions.addAction("testCheckFile",mxUtils.bind(this,function(){var p=null!=c.pages&&null!=c.getCurrentFile()?c.getCurrentFile().getAnonymizedXmlForPages(c.pages):"";p=new TextareaDialog(c,"Paste Data:",p,function(q){if(0<q.length)try{var C=function(N){function T(Y){if(null==X[Y]){if(X[Y]=!0,null!=K[Y]){for(;0<K[Y].length;){var Z=K[Y].pop();T(Z)}delete K[Y]}}else mxLog.debug(m+": Visited: "+Y)}var m=N.parentNode.id,