Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxConstants.GUIDE_STROKEWIDTH);O.dialect=mxConstants.DIALECT_SVG;O.pointerEvents=!1;O.init(M.graph.getView().getOverlayPane());return O};S=function(O,N){if(O&&null!=M.guidesArrHor)for(O=0;O<M.guidesArrHor.length;O++)M.guidesArrHor[O].node.style.visibility="hidden";if(N&&null!=M.guidesArrVer)for(O=0;O<M.guidesArrVer.length;O++)M.guidesArrVer[O].node.style.visibility="hidden"};if(1<F&&F==t.length-1){F=[];q=M.guidesArrHor;D=[];E=0;u=t[0]==I?1:0;J=t[u].y+t[u].height;if(0<p)for(u=0;u<t.length-1;u++)d=