Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.bind(this,fa.prototype.curveTo);this.originalArcTo=this.canvas.arcTo;this.canvas.arcTo=mxUtils.bind(this,fa.prototype.arcTo)}function ca(){mxRectangleShape.call(this)}function ia(){mxRectangleShape.call(this)}function ma(){mxActor.call(this)}function da(){mxActor.call(this)}function S(){mxActor.call(this)}function U(){mxRectangleShape.call(this)}function Q(){mxRectangleShape.call(this)}function Y(){mxCylinder.call(this)}function m(){mxShape.call(this)}function C(){mxShape.call(this)}function M(){mxEllipse.call(this)}