Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
l.style.shape&&u.push({title:mxResources.get("laneColor"),key:"swimlaneFillColor",defaultValue:"default"});return u}}();mxMarker.addMarker("dash",function(c,l,u,p,t,B,D,ha,I,ua){var na=t*(D+I+1),Za=B*(D+I+1);return function(){c.begin();c.moveTo(p.x-na/2-Za/2,p.y-Za/2+na/2);c.lineTo(p.x+Za/2-3*na/2,p.y-3*Za/2-na/2);c.stroke()}});mxMarker.addMarker("box",function(c,l,u,p,t,B,D,ha,I,ua){var na=t*(D+I+1),Za=B*(D+I+1),qb=p.x+na/2,fb=p.y+Za/2;p.x-=na;p.y-=Za;return function(){c.begin();c.moveTo(qb-na/2-