Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!1,D=this.isHorizontal(),ha=this.getTitleSize();0==ha||this.outline?sa.prototype.paintVertexShape.apply(this,arguments):(mxSwimlane.prototype.paintVertexShape.apply(this,arguments),c.translate(-l,-u));B||this.outline||!(D&&ha<t||!D&&ha<p)||this.paintForeground(c,l,u,p,t)};e.prototype.paintForeground=function(c,l,u,p,t){if(null!=this.state){var B=this.flipH,D=this.flipV;if(this.direction==mxConstants.DIRECTION_NORTH||this.direction==mxConstants.DIRECTION_SOUTH){var ha=B;B=D;D=ha}c.rotate(-this.getShapeRotation(),
B,D,l+p/2,u+t/2);s=this.scale;l=this.bounds.x/s;u=this.bounds.y/s;p=this.bounds.width/s;t=this.bounds.height/s;this.paintTableForeground(c,l,u,p,t)}};e.prototype.paintTableForeground=function(c,l,u,p,t){p=this.state.view.graph.getTableLines(this.state.cell,"0"!=mxUtils.getValue(this.state.style,"rowLines","1"),"0"!=mxUtils.getValue(this.state.style,"columnLines","1"));for(t=0;t<p.length;t++)b.prototype.paintTableLine(c,p[t],l,u)};e.prototype.configurePointerEvents=function(c){0==this.getTitleSize()?