Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(K){y.apply(this,arguments);this.graph.model.isEdge(K.cell)&&1!=K.style[mxConstants.STYLE_CURVED]&&this.updateLineJumps(K)};mxGraphView.prototype.updateLineJumps=function(K){var R=K.absolutePoints;if(Graph.lineJumpsEnabled){var W=null!=K.routedPoints,d=null;if(null!=R&&null!=this.validEdges&&"none"!==mxUtils.getValue(K.style,"jumpStyle","none")){var f=function(ia,ma,da){var S=new mxPoint(ma,da);S.type=ia;d.push(S);S=null!=K.routedPoints?K.routedPoints[d.length-1]:null;return null==S||S.type!=