Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p.next(),k=k.getValue(),x=this.addShape(b,k,a,n,f),k=this.layerIndexToNames(k.layerMember),null!=x&&null!=k&&b.addTagsForCells([x],k);for(g=function(z){var E=0;return{next:function(){return E<z.length?z[E++]:null},hasNext:function(){return E<z.length}}}(function(z){null==z.entries&&(z.entries=[]);return z.entries}(g.getConnects()));g.hasNext();)k=g.next(),k=this.addConnectedEdge(b,k.getValue(),n,f),null!=k&&function(z,E){null==z.entries&&(z.entries=[]);for(var I=0;I<z.entries.length;I++)if(null!=