Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
D||"default"==D&&"square"==B?c.moveTo(I,I):"rounded"==D||"default"==D&&"rounded"==B||"snip"==D||"default"==D&&"snip"==B?c.moveTo(I,ha+.5*I):("invRound"==D||"default"==D&&"invRound"==B||"fold"==D||"default"==D&&"fold"==B)&&c.moveTo(I,ha+I):c.moveTo(0,0)};Na.prototype.lineNWInner=function(c,l,u,p,t,B,D,ha,I,ua,na){ua||na?!ua&&na?c.lineTo(I,0):ua&&!na?c.lineTo(0,I):"square"==D||"default"==D&&"square"==B?c.lineTo(I,I):"rounded"==D||"default"==D&&"rounded"==B||"snip"==D||"default"==D&&"snip"==B?c.lineTo(I,
ha+.5*I):("invRound"==D||"default"==D&&"invRound"==B||"fold"==D||"default"==D&&"fold"==B)&&c.lineTo(I,ha+I):c.lineTo(0,0)};Na.prototype.paintFolds=function(c,l,u,p,t,B,D,ha,I,ua,na,Za,qb,fb,Ga){if("fold"==B||"fold"==D||"fold"==ha||"fold"==I||"fold"==ua)("fold"==D||"default"==D&&"fold"==B)&&Za&&Ga&&(c.moveTo(0,na),c.lineTo(na,na),c.lineTo(na,0)),("fold"==ha||"default"==ha&&"fold"==B)&&Za&&qb&&(c.moveTo(p-na,0),c.lineTo(p-na,na),c.lineTo(p,na)),("fold"==I||"default"==I&&"fold"==B)&&fb&&qb&&(c.moveTo(p-