Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
parentChildSpacing:parseInt(K.value),siblingSpacing:parseInt(R.value)}}];c.hideDialog();c.showCustomLayoutDialog(JSON.stringify(U,null,2))});N.className="geBtn";O=new CustomDialog(c,O,function(){null==C&&(C=2);c.loadOrgChartLayouts(P)},null,null,null,N);c.showDialog(O.container,355,140,!0,!0)},q,null,l());p.addSeparator(q);p.addItem(mxResources.get("parallels"),null,mxUtils.bind(this,function(){c.tryAndHandle(mxUtils.bind(this,function(){var C=new mxParallelEdgeLayout(k);C.checkOverlap=!0;c.prompt(mxResources.get("spacing"),