Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
u=-1,v=function(){null!=x?(null!=y&&y(u),u=x(t)):t()};this.drawRuler=v;this.sizeListener=e=l(function(){var A=g.container;f?(A=A.offsetHeight+E,I.height!=A&&(I.height=A,M.style.height=A+"px",v())):(A=A.offsetWidth+E,I.width!=A&&(I.width=A,M.style.width=A+"px",v()))},10);this.pageListener=function(){v()};this.scrollListener=c=l(function(){var A=f?g.container.scrollTop:g.container.scrollLeft;D.lastScroll!=A&&(D.lastScroll=A,v())},10);this.unitListener=function(A,H){D.setUnit(H.getProperty("unit"))};