Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Graph.prototype.createEdgeWipeAnimation=function(b,e){var g=b.absolutePoints.slice(),n=b.segments,y=b.length,q=g.length;return{execute:mxUtils.bind(this,function(E,K){if(null!=b.shape){var S=[g[0]];K=E/K;e||(K=1-K);for(var G=y*K,L=1;L<q;L++)if(G<=n[L-1]){S.push(new mxPoint(g[L-1].x+(g[L].x-g[L-1].x)*G/n[L-1],g[L-1].y+(g[L].y-g[L-1].y)*G/n[L-1]));break}else G-=n[L-1],S.push(g[L]);b.shape.points=S;b.shape.redraw();0==E&&Graph.setOpacityForNodes(this.getNodesForCells([b.cell]),1);null!=b.text&&null!=
b.text.node&&(b.text.node.style.opacity=K)}}),stop:mxUtils.bind(this,function(){null!=b.shape&&(b.shape.points=g,b.shape.redraw(),null!=b.text&&null!=b.text.node&&(b.text.node.style.opacity=""),Graph.setOpacityForNodes(this.getNodesForCells([b.cell]),e?1:0))})}};