Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[]),e.stylePoints.push(aa),LucidImporter.stylePointsSet.add(e))}}null!=F.id&&(u.style+=";lucidId="+F.id+";");u.lucidchartObject=F}function vb(u,F){var C=g(u).Properties,t=C.BoundingBox;null==u.Class||"AWS"!==u.Class.substring(0,3)&&"Amazon"!==u.Class.substring(0,6)||u.Class.includes("AWS19")||(t.h-=20);v=new mxCell("",new mxGeometry(Math.round(.75*t.x+wc),Math.round(.75*t.y+xc),Math.round(.75*t.w),Math.round(.75*t.h)),"html=1;overflow=block;blockSpacing=1;whiteSpace=wrap;");v.vertex=!0;yb(v,u,F);
v.zOrder=C.ZOrder;Ge(v,C);C.Hidden&&(v.visible=!1);return v}function yf(u,F,C,t){var e=new mxCell("",new mxGeometry(0,0,100,100),"html=1;jettySize=18;");e.geometry.relative=!0;e.edge=!0;yb(e,u,F,C,t,!0);var N=g(u).Properties,r=null!=N?N.TextAreas:u.TextAreas;if(null!=r){for(var q=0;void 0!==r["t"+q];){var Z=r["t"+q];null!=Z&&(e=Pd(Z,e,u,C,t,F));q++}for(q=0;void 0!==r["m"+q]||1>q;)Z=r["m"+q],null!=Z&&(e=Pd(Z,e,u,C,t,F)),q++;null!=r.Text&&(e=Pd(r.Text,e,u,C,t,F));r=null!=N?N.TextAreas:u.TextAreas;null!=