Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"#000000")),wa=mxUtils.setStyle(wa,mxConstants.STYLE_GRADIENTCOLOR,mxUtils.getValue(pa,mxConstants.STYLE_GRADIENTCOLOR,null)),P.getModel().isVertex(Aa[xa])&&(wa=mxUtils.setStyle(wa,mxConstants.STYLE_FONTCOLOR,mxUtils.getValue(pa,mxConstants.STYLE_FONTCOLOR,null))));P.getModel().setStyle(Aa[xa],wa)}}finally{P.getModel().endUpdate()}}));ba.className="geStyleButton";ba.style.width="36px";ba.style.height=10>=this.defaultColorSchemes.length?"24px":"30px";ba.style.margin="0px 6px 6px 0px";if(null!=Ba){var da=
Editor.isDarkMode()?"2px solid":"1px solid";null!=Ba.border&&(da=Ba.border);null!=Ba.gradient?mxClient.IS_IE&&10>document.documentMode?ba.style.filter="progid:DXImageTransform.Microsoft.Gradient(StartColorStr='"+Ba.fill+"', EndColorStr='"+Ba.gradient+"', GradientType=0)":ba.style.backgroundImage="linear-gradient("+Ba.fill+" 0px,"+Ba.gradient+" 100%)":Ba.fill==mxConstants.NONE?ba.style.background="url('"+Dialog.prototype.noColorImage+"')":ba.style.backgroundColor=""==Ba.fill?mxUtils.getValue(P.defaultVertexStyle,
mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff"):Ba.fill||mxUtils.getValue(P.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff");ba.style.border=Ba.stroke==mxConstants.NONE?da+" transparent":""==Ba.stroke?da+" "+mxUtils.getValue(P.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?"#ffffff":Editor.darkColor):da+" "+(Ba.stroke||mxUtils.getValue(P.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?
"#ffffff":Editor.darkColor));null!=Ba.title&&ba.setAttribute("title",Ba.title)}else{da=mxUtils.getValue(P.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,"#ffffff");var qa=mxUtils.getValue(P.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,"#000000");ba.style.backgroundColor=da;ba.style.border="1px solid "+qa}ba.style.borderRadius="0";Q.appendChild(ba)});Q.innerText="";for(var Ca=0;Ca<ea.length;Ca++)0<Ca&&0==mxUtils.mod(Ca,4)&&mxUtils.br(Q),za(ea[Ca])});null==this.format.currentScheme?Z(Math.min(W.length-