Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
C.Endpoint2.LinkY))}else ma=Math.abs(C.Endpoint1.x-C.Endpoint2.x),Ba=Math.abs(C.Endpoint1.y-C.Endpoint2.y);var Pa=mxUtils.getSizeForString(N.replace(/\n/g,"<br>"));q.geometry.offset=0==ma||ma<Ba?new mxPoint(Math.sign(C.Endpoint1.y-C.Endpoint2.y)*u.Side*(Pa.width/2+5+ma),0):new mxPoint(0,Math.sign(C.Endpoint2.x-C.Endpoint1.x)*u.Side*(Pa.height/2+5+Ba))}catch(Ca){console.log(Ca)}q.lucidchartObject=u;F.insert(q);return F}function Zb(u,F,C,t){null!=F&&null!=t&&(F=t(F));return null!=F&&F!=C?u+"="+F+";":
""}function Fe(u,F,C,t,e,N){if(null!=F&&null!=F.LinkX&&null!=F.LinkY&&(F.LinkX=Math.round(1E3*F.LinkX)/1E3,F.LinkY=Math.round(1E3*F.LinkY)/1E3,null!=N&&N.style&&-1<N.style.indexOf("flipH=1")&&(F.LinkX=1-F.LinkX),null!=N&&N.style&&-1<N.style.indexOf("flipV=1")&&(F.LinkY=1-F.LinkY),u.style+=(t?"":(C?"exitX":"entryX")+"="+F.LinkX+";")+(e?"":(C?"exitY":"entryY")+"="+F.LinkY+";")+(C?"exitPerimeter":"entryPerimeter")+"=0;",F.Inside))return"["+F.LinkX+","+F.LinkY+",0]"}function He(u,F,C,t,e){try{var N=function(ma,