Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Pa),Cf(u,Pa),"1"==urlParams.lucidchartObject&&null!=Pa.lucidchartObject&&Za(Pa,"lucidchartObject",JSON.stringify(Pa.lucidchartObject,null,2),u),delete Pa.lucidchartObject,delete Pa.zOrder)}}catch(Ca){console.log(Ca)}C||u.setSelectionCells(e)}finally{u.getModel().endUpdate()}}function Cf(u,F){if(u.model.contains(F)&&F.edge){var C=u.view.getState(F);if(null!=C&&null!=F.children){var t=mxRectangle.fromRectangle(C.paintBounds);t.grow(5);for(var e=0;e<F.children.length;e++){var N=u.view.getState(F.children[e]);