Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[c,p,u]);3<=c.state.strokeWidth&&(p=mxUtils.getValue(this.style,"fillColor",null),null!=p&&(c.setStrokeColor(p),c.setStrokeWidth(c.state.strokeWidth-2),c.setDashed(t,B),bb.prototype.origPaintEdgeShape.apply(this,[c,l,u])))};mxCellRenderer.registerShape("filledEdge",bb);"undefined"!==typeof StyleFormatPanel&&function(){var c=StyleFormatPanel.prototype.getCustomColors;StyleFormatPanel.prototype.getCustomColors=function(){var l=this.editorUi.getSelectionState(),u=c.apply(this,arguments);"umlFrame"==
l.style.shape&&u.push({title:mxResources.get("laneColor"),key:"swimlaneFillColor",defaultValue:"default"});return u}}();mxMarker.addMarker("dash",function(c,l,u,p,t,B,D,ha,I,ua){var na=t*(D+I+1),Za=B*(D+I+1);return function(){c.begin();c.moveTo(p.x-na/2-Za/2,p.y-Za/2+na/2);c.lineTo(p.x+Za/2-3*na/2,p.y-3*Za/2-na/2);c.stroke()}});mxMarker.addMarker("box",function(c,l,u,p,t,B,D,ha,I,ua){var na=t*(D+I+1),Za=B*(D+I+1),qb=p.x+na/2,fb=p.y+Za/2;p.x-=na;p.y-=Za;return function(){c.begin();c.moveTo(qb-na/2-