Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(c,d){return c&&c.equals?c.equals(d):c===d}(a,"BeginX")||function(c,d){return c&&c.equals?c.equals(d):c===d}(a,"BeginY")||function(c,d){return c&&c.equals?c.equals(d):c===d}(a,"EndY")||function(c,d){return c&&c.equals?c.equals(d):c===d}(a,"EndX")))return!0}b=b.nextSibling}return!1};g.prototype.getPageDimensions=function(){var b=0,a=0,c=function(f,k){return f[k]?f[k]:null}(this.cellElements,"PageHeight"),d=function(f,k){return f[k]?f[k]:null}(this.cellElements,"PageWidth");null!=c&&(b=parseFloat(c.getAttribute("V"))*
h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$(),b=Math.round(100*b)/100);null!=d&&(a=parseFloat(d.getAttribute("V"))*h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$(),a=Math.round(100*a)/100);return new mxPoint(a,b)};g.prototype.getDrawingScale=function(){var b=this.cellElements;b=b.DrawingScale?b.DrawingScale:null;return null!=b?parseFloat(b.getAttribute("V"))*h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$():1};g.prototype.getPageScale=function(){var b=this.cellElements;b=b.PageScale?