Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.rows),d.getIndex()>a?(this.rows.push(d),c=!0):this.rows[d.getIndex()-1]=d;c&&function(k,n){n.compare?k.sort(function(p,x){return n.compare(p,x)}):k.sort(n)}(this.rows,new g.mxVsdxGeometry$0(this))};g.prototype.inheritGeo=function(b){this.noFill=b.noFill;this.noLine=b.noLine;this.noShow=b.noShow;this.noSnap=b.noSnap;this.noQuickDrag=b.noQuickDrag;var a=this.rows=[];a.push.apply(a,b.rows)};g.prototype.getIndex$=function(){return this.index};g.prototype.isNoFill=function(){return this.noFill};g.prototype.isNoLine=