Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(K,U){return!1};this.alternateEdgeStyle="vertical";null==f&&this.loadStylesheet();var x=this.graphHandler.getGuideStates;this.graphHandler.getGuideStates=function(){var K=x.apply(this,arguments);if(this.graph.pageVisible){var U=[],L=this.graph.pageFormat,O=this.graph.pageScale,X=L.width*O;L=L.height*O;O=this.graph.view.translate;for(var W=this.graph.view.scale,J=this.graph.getPageLayout(),ha=0;ha<J.width;ha++)U.push(new mxRectangle(((J.x+ha)*X+O.x)*W,(J.y*L+O.y)*W,X*W,L*W));for(ha=1;ha<J.height;ha++)U.push(new mxRectangle((J.x*
X+O.x)*W,((J.y+ha)*L+O.y)*W,X*W,L*W));K=U.concat(K)}return K};mxDragSource.prototype.dragElementZIndex=mxPopupMenu.prototype.zIndex;mxGuide.prototype.getGuideColor=function(K,U){return null==K.cell?"#ffa500":mxConstants.GUIDE_COLOR};this.graphHandler.createPreviewShape=function(K){this.previewColor="#000000"==this.graph.background?"#ffffff":mxGraphHandler.prototype.previewColor;return mxGraphHandler.prototype.createPreviewShape.apply(this,arguments)};var z=this.graphHandler.getCells;this.graphHandler.getCells=