Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[];this.connFillStyles=[];this.lineStyles=[];this.connLineStyles=[];this.lineStylesExt=[];this.connLineStylesExt=[];this.connFontColors=[];this.connFontStyles=[];this.fontColors=[];this.fontStyles=[];this.variantEmbellishment=[0,0,0,0];this.variantFillIdx=function(a){var c=function(d){if(0==d.length)return 0;for(var f=[],k=0;k<d[0];k++)f.push(c(d.slice(1)));return f};return c(a)}([4,4]);this.variantLineIdx=function(a){var c=function(d){if(0==d.length)return 0;for(var f=[],k=0;k<d[0];k++)f.push(c(d.slice(1)));