Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Q));null!=X.text&&X.text.checkBounds()&&(O.save(),X.text.paint(O),O.restore());X=A(Q,J.XMLNS,"Section");X.setAttribute("N","Geometry");X.setAttribute("IX","0");for(H=0;H<T.length;H++)K=ca(T[H],!1,!0),X.appendChild(a(0==H?"MoveTo":"LineTo",H+1,K.x,K.y,Q));X.appendChild(b("NoFill","1",Q));X.appendChild(b("NoLine","0",Q));P.appendChild(X);return P}function p(H,K,P,Q,R,ha,X){var T=H.geometry,V=T;if(null!=T)try{T.relative&&ha&&(V=T.clone(),T.x*=ha.width,T.y*=ha.height,H.vertex&&null!=T.offset&&(T.x+=T.offset.x,
T.y+=T.offset.y),T.relative=0);var oa=B(H.id);if(!H.treatAsSingle&&0<H.getChildCount()){var ca=d(oa+"10000",T,K,Q,R,X);ca.setAttribute("Type","Group");var qa=A(Q,J.XMLNS,"Shapes");O.save();O.translate(-T.x,-T.y);var sa=T.clone();sa.x=0;sa.y=0;H.setGeometry(sa);H.treatAsSingle=!0;var Fa=p(H,K,P,Q,T.height,T,!0);delete H.treatAsSingle;H.setGeometry(T);null!=Fa&&qa.appendChild(Fa);for(R=0;R<H.getChildCount();R++)Fa=p(H.children[R],K,P,Q,T.height,T,!0),null!=Fa&&qa.appendChild(Fa);ca.appendChild(qa);
O.restore();return ca}if(H.vertex){ca=d(oa,T,K,Q,R,X);var ka=P.view.getState(H,!0);null!=ka&&(c(ka,ca,Q),O.newShape(ca,ka,Q),null!=ka.text&&ka.text.checkBounds()&&(O.save(),ka.text.paint(O),O.restore()),null!=ka.shape&&ka.shape.checkBounds()&&(O.save(),ka.shape.paint(O),O.restore()),ca.appendChild(O.getShapeGeo()),O.endShape(),ca.setAttribute("Type",O.getShapeType()));return ca}return n(H,K,P,Q,R,X)}finally{H.geometry=V}else return null}function x(H,K){var P=mxUtils.createXmlDocument(),Q=A(P,J.XMLNS,