Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
O.y||0<O.height)&&mxUtils.intersects(K,new mxRectangle(U.x,U.y+(O.y-O.height-1)*W+(0==O.y?U.height:0),U.width,1))&&(X="row-resize")),U=this.view.getState(this.model.getParent(U.cell))}null!=X&&L.setCursor(X)}}}),mouseUp:mxUtils.bind(this,function(K,U){m=h=n=t=null})})}this.cellRenderer.minSvgStrokeWidth=.1;this.cellRenderer.getLabelValue=function(K){var U=mxCellRenderer.prototype.getLabelValue.apply(this,arguments);K.view.graph.isHtmlLabel(K.cell)&&(1!=K.style.html?U=mxUtils.htmlEntities(U,!1):K.lastLabelValue!=
U&&(K.lastLabelValue=U,U=Graph.sanitizeHtml(U)));return U};if("undefined"!==typeof mxVertexHandler){this.setConnectable(!0);this.setDropEnabled(!0);this.setPanning(!0);this.setTooltips(!0);this.setAllowLoops(!0);this.allowAutoPanning=!0;this.constrainChildren=this.resetEdgesOnConnect=!1;this.constrainRelativeChildren=!0;this.graphHandler.scrollOnMove=!1;this.graphHandler.scaleGrid=!0;this.connectionHandler.setCreateTarget(!1);this.connectionHandler.insertBeforeSource=!0;this.connectionHandler.isValidSource=