Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(g,q,p){mxCellRenderer.prototype.installCellOverlayListeners.apply(this,arguments);mxEvent.addListener(p.node,mxClient.IS_POINTER?"pointerdown":"mousedown",function(t){q.fireEvent(new mxEventObject("pointerdown","event",t,"state",g))});!mxClient.IS_POINTER&&mxClient.IS_TOUCH&&mxEvent.addListener(p.node,"touchstart",function(t){q.fireEvent(new mxEventObject("pointerdown","event",t,"state",g))})};v.getAllConnectionConstraints=function(){return null};v.connectionHandler.marker.highlight.keepOnTop=