Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
b||1!=b.nodeType)&&null!==b||"string"!==typeof a&&null!==a||void 0!==c)throw Error("invalid overload");return h.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String(b,a)}return h.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String$int(b,a,c)};g.getIntAttr$org_w3c_dom_Element$java_lang_String=function(b,a){return g.getIntAttr$org_w3c_dom_Element$java_lang_String$int(b,a,0)};g.getStyleString=function(b,a){for(var c="",d=function(p){var x=0;return{next:function(){return x<
p.length?p[x++]:null},hasNext:function(){return x<p.length}}}(function(p){return Object.keys(p).map(function(x){return p[x]})}(b)),f=function(p){var x=0;return{next:function(){return x<p.length?p[x++]:null},hasNext:function(){return x<p.length}}}(Object.keys(b));f.hasNext();){var k=f.next(),n=d.next();if(!function(p,x){return p&&p.equals?p.equals(x):p===x}(k,mxConstants.STYLE_SHAPE)||!function(p,x,z){void 0===z&&(z=0);return p.substr(z,x.length)===x}(b[k]?b[k]:null,"image")&&!function(p,x,z){void 0===
z&&(z=0);return p.substr(z,x.length)===x}(b[k]?b[k]:null,"rounded="))try{c=c+k+a}catch(p){}c=c+n+";"}return c};g.surroundByTags=function(b,a,c){return"<"+a+(c?' style="'+c+'"':"")+">"+b+"</"+a+">"};g.htmlEntities=function(b){return b.replace(RegExp("&","g"),"&amp;").replace(RegExp('"',"g"),"&quot;").replace(RegExp("'","g"),"&prime;").replace(RegExp("<","g"),"&lt;").replace(RegExp(">","g"),"&gt;")};g.toInitialCapital=function(b){b=b.split(" ");for(var a="",c=0;c<b.length;c++){var d=b[c],f=d.substring(0,