Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
getValue:function(){return this.value}})}(this.connects,n.getFromSheet(),n)}f=f.nextSibling}}d=d.nextSibling}for(d=b.firstChild;null!=d;)null!=d&&1==d.nodeType&&(f=d,k=f.nodeName,function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Rel")?this.resolveRel(f,a,c):function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Shapes")?this.shapes=this.parseShapes(f,null,!1):function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"PageSheet")&&(this.pageSheet=f)),d=d.nextSibling};g.prototype.resolveRel=function(b,