Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
V){var ba=U.getGlobalVariable;U=this.createTemporaryGraph(U.getStylesheet());for(var fa,qa=0;qa<this.pages.length;qa++)if(this.pages[qa].getId()==V){fa=this.updatePageRoot(this.pages[qa]);break}null==fa&&(fa=this.currentPage);U.getGlobalVariable=function(ta){return"page"==ta?fa.getName():"pagenumber"==ta?1:ba.apply(this,arguments)};document.body.appendChild(U.container);U.model.setRoot(fa.root)}if(null!=F.layerIds){var ia=U.model,ya=ia.getChildCells(ia.getRoot()),xa={};for(qa=0;qa<F.layerIds.length;qa++)xa[F.layerIds[qa]]=