Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){var m=this.editorUi.getSelectionState();null!=this.defaultColorSchemes&&0<this.defaultColorSchemes.length&&"image"!=m.style.shape&&!m.containsLabel&&0<m.cells.length&&this.container.appendChild(this.addStyles(this.createPanel()));I.apply(this,arguments);if(Editor.enableCustomProperties){for(var B={},K=m.vertices,R=m.edges,U=0;U<K.length;U++)this.findCommonProperties(K[U],B,0==U);for(U=0;U<R.length;U++)this.findCommonProperties(R[U],B,0==K.length&&0==U);null!=Object.getOwnPropertyNames&&
0<Object.getOwnPropertyNames(B).length&&this.container.appendChild(this.addProperties(this.createPanel(),B,m))}};var d=StyleFormatPanel.prototype.addStyleOps;StyleFormatPanel.prototype.addStyleOps=function(m){var B=this.editorUi.getSelectionState();1==B.cells.length?this.addActions(m,["copyStyle","pasteStyle"]):1<=B.cells.length&&this.addActions(m,["pasteStyle","pasteData"]);return d.apply(this,arguments)};EditorUi.prototype.propertiesCollapsed=!0;StyleFormatPanel.prototype.addProperties=function(m,