Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d.appendChild(d.resizeSensor);"static"==q(d,"position")&&(d.style.position="relative");var k=d.resizeSensor.childNodes[0],v=k.childNodes[0],z=d.resizeSensor.childNodes[1],A=function(){v.style.width="100000px";v.style.height="100000px";k.scrollLeft=1E5;k.scrollTop=1E5;z.scrollLeft=1E5;z.scrollTop=1E5};A();var H=!1,J=function(){d.resizedAttached&&(H&&(d.resizedAttached.call(),H=!1),b(J))};b(J);var O,G,ja,fa;f=function(){if((ja=d.offsetWidth)!=O||(fa=d.offsetHeight)!=G)H=!0,O=ja,G=fa;A()};var ca=function(ia,
ma,da){ia.attachEvent?ia.attachEvent("on"+ma,da):ia.addEventListener(ma,da)};ca(k,"scroll",f);ca(z,"scroll",f)}var N=function(){GraphViewer.resizeSensorEnabled&&n()};if(GraphViewer.useResizeObserver&&"undefined"!==typeof ResizeObserver){var T=null,F=!1;(new ResizeObserver(function(){F||(null!=T&&window.clearTimeout(T),T=window.setTimeout(function(){F=!0;N();T=null;F=!1},200))})).observe(g)}else{var K=Object.prototype.toString.call(g),R="[object Array]"===K||"[object NodeList]"===K||"[object HTMLCollection]"===