Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f.getCell(e),null!=c&&c!=J&&(J=null));null!=J&&(f.getChildAt(m,F)!=J&&f.add(m,J,F),this.patchCellRecursive(b,f,J,d,u),F++);return e});for(N=[null];0<N.length;)if(H=N.shift(),H=L(null!=H?H.child:null,null!=H?H.insert:!1),R=v[H],null!=R&&(delete v[H],N.push({child:f.getCell(R)})),R=E[H],null!=R&&(delete E[H],N.push({child:this.getCellForJson(R),insert:!0})),0==N.length){for(H in v)N.push({child:f.getCell(v[H])}),delete v[H];for(H in E)N.push({child:this.getCellForJson(E[H]),insert:!0}),delete E[H]}}};