Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(L){y.apply(this,arguments);this.graph.model.isEdge(L.cell)&&1!=L.style[mxConstants.STYLE_CURVED]&&this.updateLineJumps(L)};mxGraphView.prototype.updateLineJumps=function(L){var R=L.absolutePoints;if(Graph.lineJumpsEnabled){var V=null!=L.routedPoints,d=null;if(null!=R&&null!=this.validEdges&&"none"!==mxUtils.getValue(L.style,"jumpStyle","none")){var f=function(ia,ma,aa){var la=new mxPoint(ma,aa);la.type=ia;d.push(la);la=null!=L.routedPoints?L.routedPoints[d.length-1]:null;return null==la||
la.type!=ia||la.x!=ma||la.y!=aa},l=.5*this.scale;V=!1;d=[];for(var u=0;u<R.length-1;u++){for(var A=R[u+1],B=R[u],F=[],M=R[u+2];u<R.length-2&&mxUtils.ptSegDistSq(B.x,B.y,M.x,M.y,A.x,A.y)<1*this.scale*this.scale;)A=M,u++,M=R[u+2];V=f(0,B.x,B.y)||V;for(var O=0;O<this.validEdges.length;O++){var H=this.validEdges[O],ja=H.absolutePoints;if(null!=ja&&mxUtils.intersects(L,H)&&"1"!=H.style.noJump)for(H=0;H<ja.length-1;H++){var da=ja[H+1],ca=ja[H];for(M=ja[H+2];H<ja.length-2&&mxUtils.ptSegDistSq(ca.x,ca.y,
M.x,M.y,da.x,da.y)<1*this.scale*this.scale;)da=M,H++,M=ja[H+2];M=mxUtils.intersection(B.x,B.y,A.x,A.y,ca.x,ca.y,da.x,da.y);if(null!=M&&(Math.abs(M.x-B.x)>l||Math.abs(M.y-B.y)>l)&&(Math.abs(M.x-A.x)>l||Math.abs(M.y-A.y)>l)){da=M.x-B.x;ca=M.y-B.y;M={distSq:da*da+ca*ca,x:M.x,y:M.y};for(da=0;da<F.length;da++)if(F[da].distSq>M.distSq){F.splice(da,0,M);M=null;break}null==M||0!=F.length&&F[F.length-1].x===M.x&&F[F.length-1].y===M.y||F.push(M)}}}for(H=0;H<F.length;H++)V=f(1,F[H].x,F[H].y)||V}M=R[R.length-
1];V=f(0,M.x,M.y)||V}L.routedPoints=d;return V}return!1};var q=mxConnector.prototype.paintLine;mxConnector.prototype.paintLine=function(L,R,V){this.routedPoints=null!=this.state?this.state.routedPoints:null;if(this.outline||null==this.state||null==this.style||null==this.state.routedPoints||0==this.state.routedPoints.length)q.apply(this,arguments);else{var d=mxUtils.getValue(this.style,mxConstants.STYLE_ARCSIZE,mxConstants.LINE_ARCSIZE)/2,f=(parseInt(mxUtils.getValue(this.style,"jumpSize",Graph.defaultJumpSize))-