Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
m.setCellStyles(mxConstants.STYLE_ROTATION,Number(p.value),[f[x]])}}finally{m.getModel().endUpdate()}});t.className="geBtn gePrimaryBtn";mxEvent.addListener(u,"keypress",function(x){13==x.keyCode&&t.click()});v=document.createElement("div");v.style.marginTop="20px";v.style.textAlign="right";b.editor.cancelFirst?(v.appendChild(d),v.appendChild(t)):(v.appendChild(t),v.appendChild(d));u.appendChild(v);this.container=u},LibraryDialog=function(b,f,m,d,u,v){function E(S){for(S=document.elementFromPoint(S.clientX,
S.clientY);null!=S&&S.parentNode!=c;)S=S.parentNode;var l=null;if(null!=S){var n=c.firstChild;for(l=0;null!=n&&n!=S;)n=n.nextSibling,l++}return l}function F(S,l,n,z,C,D,M,K,O){try{if(b.spinner.stop(),null==l||"image/"==l.substring(0,6))if(null==S&&null!=M||null==g[S]){var V=function(){W.innerText="";W.style.cursor="pointer";W.style.whiteSpace="nowrap";W.style.textOverflow="ellipsis";mxUtils.write(W,null!=X.title&&0<X.title.length?X.title:mxResources.get("untitled"));W.style.color=null==X.title||0==