Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Pa),Cf(u,Pa),"1"==urlParams.lucidchartObject&&null!=Pa.lucidchartObject&&Za(Pa,"lucidchartObject",JSON.stringify(Pa.lucidchartObject,null,2),u),delete Pa.lucidchartObject,delete Pa.zOrder)}}catch(Ca){console.log(Ca)}C||u.setSelectionCells(e)}finally{u.getModel().endUpdate()}}function Cf(u,F){if(u.model.contains(F)&&F.edge){var C=u.view.getState(F);if(null!=C&&null!=F.children){var t=mxRectangle.fromRectangle(C.paintBounds);t.grow(5);for(var e=0;e<F.children.length;e++){var N=u.view.getState(F.children[e]);
null==N||mxUtils.contains(t,N.paintBounds.x,N.paintBounds.y)||(N.cell.geometry.offset=new mxPoint(0,0))}}u=F.lucidchartObject;null!=u&&"elbow"==u.Shape&&null==u.ElbowControlPoints&&null==u.ElbowPoints&&null!=C.style.exitX&&null!=C.style.exitY&&null!=C.style.entryX&&null!=C.style.entryY&&(F.style=mxUtils.setStyle(F.style,"exitX",Math.round(20*C.style.exitX)/20),F.style=mxUtils.setStyle(F.style,"exitY",Math.round(20*C.style.exitY)/20),F.style=mxUtils.setStyle(F.style,"entryX",Math.round(20*C.style.entryX)/
20),F.style=mxUtils.setStyle(F.style,"entryY",Math.round(20*C.style.entryY)/20))}}function Bf(u,F){if(u.model.contains(F)&&null!=F.style&&""!=F.style){u=F.style.split(";");for(var C={},t=[],e=u.length-1;0<=e;e--){var N=u[e].split("=");if(2!=N.length||null==C[N[0]])C[N[0]]=N[1],""!=u[e]&&t.push(u[e])}F.style=t.reverse().join(";")+";"}}function Af(u,F){if(u.model.contains(F)&&null!=F.children&&null!=F.geometry&&F.vertex&&"group;dropTarget=0;pointerEvents=0;"==F.style){for(var C=null,t=0;t<F.children.length;t++)if(F.children[t].vertex){var e=