Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var L=this.graph.getLinkForCell(this.state.cell),P=this.graph.getLinksForState(this.state);if(null!=L||null!=P&&0<P.length)this.updateLinkHint(L,P),this.redrawHandles()};var Va=mxConnectionHandler.prototype.init;mxConnectionHandler.prototype.init=function(){Va.apply(this,arguments);this.constraintHandler.isEnabled=mxUtils.bind(this,function(){return this.graph.connectionHandler.isEnabled()})};var La=mxVertexHandler.prototype.redrawHandles;mxVertexHandler.prototype.redrawHandles=function(){if(null!=