Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Q};var U=mxShape.prototype.paintGlassEffect;mxShape.prototype.paintGlassEffect=function(W,Q,V,X,Y,Z){null!=W.handJiggle&&W.handJiggle.constructor==m?(W.handJiggle.passThrough=!0,U.apply(this,arguments),W.handJiggle.passThrough=!1):U.apply(this,arguments)}})();Editor.fastCompress=function(m){return null==m||0==m.length||"undefined"===typeof pako?m:Graph.arrayBufferToString(pako.deflateRaw(m))};Editor.fastDecompress=function(m){return null==m||0==m.length||"undefined"===typeof pako?m:pako.inflateRaw(Graph.stringToArrayBuffer(atob(m)),