Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
X.getCellAt(eb.getGraphX(),eb.getGraphY())||oa.cell;X.graphHandler.selectCellForEvent(jb,eb)}kb=0};$a.positionChanged=function(){};$a.reset=function(){kb=0};x.push($a)})(ea)}}return null!=x?x.reverse():null};var C=mxVertexHandler.prototype.setHandlesVisible;mxVertexHandler.prototype.setHandlesVisible=function(x){C.apply(this,arguments);if(null!=this.moveHandles)for(var L=0;L<this.moveHandles.length;L++)null!=this.moveHandles[L]&&(this.moveHandles[L].node.style.visibility=x?"":"hidden");if(null!=this.cornerHandles)for(L=
0;L<this.cornerHandles.length;L++)this.cornerHandles[L].node.style.visibility=x?"":"hidden"};mxVertexHandler.prototype.isMoveHandlesVisible=function(){return this.graph.isTable(this.state.cell)&&this.graph.isCellMovable(this.state.cell)};mxVertexHandler.prototype.refreshMoveHandles=function(){var x=this.isMoveHandlesVisible();x&&null==this.moveHandles?this.moveHandles=this.createMoveHandles():x||null==this.moveHandles||this.destroyMoveHandles();if(x&&null==this.moveHandles){for(x=0;x<this.moveHandles.length;x++)null!=