Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"base",ma.prototype.base)));return new mxPoint(u.x+Math.min(u.width,t*u.width+B),u.y+u.height-p)},function(u,p){var t=Math.max(0,Math.min(1,mxUtils.getValue(this.state.style,"position",ma.prototype.position)));this.state.style.base=Math.round(Math.max(0,Math.min(u.width,p.x-u.x-t*u.width)))},!1)];mxUtils.getValue(c.style,mxConstants.STYLE_ROUNDED,!1)&&l.push(pb(c));return l},internalStorage:function(c){var l=[hb(c,["dx","dy"],function(u){var p=Math.max(0,Math.min(u.width,mxUtils.getValue(this.state.style,
"dx",Aa.prototype.dx))),t=Math.max(0,Math.min(u.height,mxUtils.getValue(this.state.style,"dy",Aa.prototype.dy)));return new mxPoint(u.x+p,u.y+t)},function(u,p){this.state.style.dx=Math.round(Math.max(0,Math.min(u.width,p.x-u.x)));this.state.style.dy=Math.round(Math.max(0,Math.min(u.height,p.y-u.y)))},!1)];mxUtils.getValue(c.style,mxConstants.STYLE_ROUNDED,!1)&&l.push(pb(c));return l},module:function(c){return[hb(c,["jettyWidth","jettyHeight"],function(l){var u=Math.max(0,Math.min(l.width,mxUtils.getValue(this.state.style,