Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
else for(a(x.sourcePoint),a(x.targetPoint),p=x.points,x=0;null!=p&&x<p.length;x++)a(p[x])}var z={x:c,y:d};for(n in b.model.cells)if(p=b.model.cells[n],x=p.geometry,null!=x&&1==p.parent.id&&(x.x-=c,x.y-=d,p.isEdge()))for(this.transPoint(x.sourcePoint,z),this.transPoint(x.targetPoint,z),this.transPoint(x.offset,z),p=x.points,x=0;null!=p&&x<p.length;x++)this.transPoint(p[x],z);return{width:f-c,height:k-d}};g.prototype.transPoint=function(b,a){null!=b&&(b.x-=a.x,b.y-=a.y)};g.prototype.processPage=function(b,
a){var c=b.getModel(),d="",f="";for(p in c.cells){var k=c.cells[p];if(b.getDefaultParent()===c.getParent(k)){d=d.concat(f);d=d.concat('{"xml":"');var n=this.createMxGraph();n.addCell(k);this.sanitiseGraph(n);if(0===n.getModel().getChildCount(n.getDefaultParent()))return"continue";f=this.normalizeGeo(k);n=m.prototype.processPage.call(this,n,null);d=d.concat(n);d=d.concat('","w":');d=d.concat(f.width);d=d.concat(',"h":');d=d.concat(f.height);d=d.concat(',"title":"');f=c.getStyle(k);k="";if(null!=f&&
(n=f.indexOf(h.mxgraph.io.vsdx.mxVsdxConstants.VSDX_ID),0<=n)){n+=h.mxgraph.io.vsdx.mxVsdxConstants.VSDX_ID.length+1;var p=parseInt(f.substring(n,f.indexOf(";",n)));a:{f=this.vertexShapeMap;n=new h.mxgraph.io.vsdx.ShapePageId(a.getId(),p);null==f.entries&&(f.entries=[]);for(var x=0;x<f.entries.length;x++)if(null!=f.entries[x].key.equals&&f.entries[x].key.equals(n)||f.entries[x].key===n){f=f.entries[x].value;break a}f=null}null!=f&&(k=f.getName())}d=d.concat(k);d=d.concat('"}');f=","}}this.RESPONSE_DIAGRAM_START=
0<d.length?",":"";return d};return g}(h.mxgraph.io.mxVsdxCodec);A.mxVssxCodec=B;B.__class="com.mxgraph.io.mxVssxCodec"})(y.io||(y.io={}))})(h.mxgraph||(h.mxgraph={}))})(com||(com={}));