Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
E.parent.id){b=z=0;do p=k.geometry,null!=p&&(z+=p.x,b+=p.y),k=k.parent;while(null!=k);x.parent=E.parent;for(k=0;k<n.length;k++)n[k].x+=z,n[k].y+=b}I.points=n;a.hasOwnProperty("curved")&&function(M,L){return M&&M.equals?M.equals(L):M===L}(function(M,L){return M[L]?M[L]:null}(a,"curved"),"1")&&(I=g.getModel().getGeometry(x),c=f.getControlPoints(c),I.points=c);this.processEdgeGeo(f,x);f=this.layerIndexToNames(f.layerMember);null!=f&&g.addTagsForCells([x],f);return d};m.prototype.addUnconnectedEdge=function(g,
b,a,c){if(null!=b){var d=g.getModel().getGeometry(b);null!=d&&(c=d.height)}var f=a.getStartXY(c),k=a.getEndXY(c),n=a.getStyleFromEdgeShape(c),p=a.getRoutingPoints(c,f,a.getRotation()),x=a.getRotation();if(0!==x){0===a.getShapeIndex()?d=g.insertEdge(b,null,null,null,null,h.mxgraph.io.vsdx.mxVsdxUtils.getStyleString(n,"=")):(d=g.createEdge(b,null,null,null,null,h.mxgraph.io.vsdx.mxVsdxUtils.getStyleString(n,"=")),d=g.addEdge(d,b,null,null,a.getShapeIndex()+this.shapeIndexShift++));var z=a.createLabelSubShape(g,
d);null!=z&&(z.setStyle(z.getStyle()+";rotation="+(60<x&&240>x?(x+180)%360:x)),x=z.getGeometry(),x.x=0,x.y=0,x.relative=!0,x.offset=new mxPoint(-x.width/2,-x.height/2))}else 0===a.getShapeIndex()?d=g.insertEdge(b,null,a.getTextLabel(!0),null,null,h.mxgraph.io.vsdx.mxVsdxUtils.getStyleString(n,"=")):(d=g.createEdge(b,null,a.getTextLabel(!0),null,null,h.mxgraph.io.vsdx.mxVsdxUtils.getStyleString(n,"=")),d=g.addEdge(d,b,null,null,a.getShapeIndex()+this.shapeIndexShift++)),x=a.getLblEdgeOffset(g.getView(),
p),d.getGeometry().offset=x;this.rotateChildEdge(g.getModel(),b,f,k,p);b=g.getModel().getGeometry(d);p.pop();p.shift();b.points=p;b.setTerminalPoint(f,!0);b.setTerminalPoint(k,!1);n.hasOwnProperty("curved")&&function(E,I){return E&&E.equals?E.equals(I):E===I}(function(E,I){return E[I]?E[I]:null}(n,"curved"),"1")&&(b=g.getModel().getGeometry(d),g=a.getControlPoints(c),b.points=g);this.processEdgeGeo(a,d);return d};m.prototype.rotateChildEdge=function(g,b,a,c,d){if(null!=b){var f=g.getGeometry(b);g=