Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.currentState=this.currentTarget=null;null!=this.highlight&&this.highlight.hide();null!=oa.tooltipHandler&&oa.tooltipHandler.hide()}};oa.click=function(sa){};oa.addMouseListener(xa);mxEvent.addListener(document,"mouseleave",function(sa){xa.clear()})};Graph.prototype.duplicateCells=function(x,L){x=null!=x?x:this.getSelectionCells();L=null!=L?L:!0;for(var P=0;P<x.length;P++)this.isTableCell(x[P])&&(x[P]=this.model.getParent(x[P]));x=this.model.getTopmostCells(x);var X=this.getModel(),ea=this.gridSize,