Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
20),F.style=mxUtils.setStyle(F.style,"entryY",Math.round(20*C.style.entryY)/20))}}function Bf(u,F){if(u.model.contains(F)&&null!=F.style&&""!=F.style){u=F.style.split(";");for(var C={},t=[],e=u.length-1;0<=e;e--){var N=u[e].split("=");if(2!=N.length||null==C[N[0]])C[N[0]]=N[1],""!=u[e]&&t.push(u[e])}F.style=t.reverse().join(";")+";"}}function Af(u,F){if(u.model.contains(F)&&null!=F.children&&null!=F.geometry&&F.vertex&&"group;dropTarget=0;pointerEvents=0;"==F.style){for(var C=null,t=0;t<F.children.length;t++)if(F.children[t].vertex){var e=