Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Graph.prototype.visitTableCells=function(b,e){var g=null,n=this.model.getChildCells(b,!0);b=this.getActualStartSize(b,!0);for(var y=0;y<n.length;y++){for(var q=this.getActualStartSize(n[y],!0),E=this.model.getChildCells(n[y],!0),K=this.getCellStyle(n[y],!0),S=null,G=[],L=0;L<E.length;L++){var R=this.getCellGeometry(E[L]),V={cell:E[L],rospan:1,colspan:1,row:y,col:L,geo:R};R=null!=R.alternateBounds?R.alternateBounds:R;V.point=new mxPoint(R.width+(null!=S?S.point.x:b.x+q.x),R.height+(null!=g&&null!=
g[0]?g[0].point.y:b.y+q.y));V.actual=V;null!=g&&null!=g[L]&&1<g[L].rowspan?(V.rowspan=g[L].rowspan-1,V.colspan=g[L].colspan,V.actual=g[L].actual):null!=S&&1<S.colspan?(V.rowspan=S.rowspan,V.colspan=S.colspan-1,V.actual=S.actual):(S=this.getCurrentCellStyle(E[L],!0),null!=S&&(V.rowspan=parseInt(S.rowspan||1),V.colspan=parseInt(S.colspan||1)));S=1==mxUtils.getValue(K,mxConstants.STYLE_SWIMLANE_HEAD,1)&&mxUtils.getValue(K,mxConstants.STYLE_STROKECOLOR,mxConstants.NONE)!=mxConstants.NONE;e(V,E.length,
n.length,b.x+(S?q.x:0),b.y+(S?q.y:0));G.push(V);S=V}g=G}};Graph.prototype.getTableLines=function(b,e,g){var n=[],y=[];(e||g)&&this.visitTableCells(b,mxUtils.bind(this,function(q,E,K,S,G){e&&q.row<K-1&&(null==n[q.row]&&(n[q.row]=[new mxPoint(S,q.point.y)]),1<q.rowspan&&n[q.row].push(null),n[q.row].push(q.point));g&&q.col<E-1&&(null==y[q.col]&&(y[q.col]=[new mxPoint(q.point.x,G)]),1<q.colspan&&y[q.col].push(null),y[q.col].push(q.point))}));return n.concat(y)};