Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
u){var F=0,C=!1;if(null!=u)for(var t=0;!C&&t<u.length;){var e=u[t];"b"==e.n?null!=e.v&&e.v&&(C=!0,F+=1):"fc"==e.n&&"Bold"==e.v&&(C=!0,F+=1);t++}C=!1;if(null!=u)for(t=0;!C&&t<u.length;)e=u[t],"i"==e.n&&null!=e.v&&e.v&&(C=!0,F+=2),t++;C=!1;if(null!=u)for(t=0;!C&&t<u.length;)e=u[t],"u"==e.n&&null!=e.v&&e.v&&(C=!0,F+=4),t++;if(0<F)return"fontStyle="+F+";"}return""}function E(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("a"==C.n&&null!=C.v)return"align="+C.v+";";F++}return""}function I(u){u=
b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if(null!=C.v&&"il"==C.n)return"spacingLeft="+A(.75*C.v)+";";F++}return""}function J(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("ir"==C.n&&null!=C.v)return"spacingRight="+A(.75*C.v)+";";F++}return""}function O(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("mt"==C.n&&null!=C.v)return"spacingTop="+A(.75*C.v)+";";F++}return""}function M(u){u=b(u);if(null!=u)for(var F=0;F<u.length;){var C=u[F];if("mb"==C.n&&null!=C.v)return"spacingBottom="+