Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.sanitiseGraph(b);return f};m.prototype.postImportPage=function(g,b,a){try{var c=function(n){if(null!=n){n=n.entries||[];for(var p=0;p<n.length;p++){var x=n[p].value||{};x.toBeCroppedImg&&f.push(x);c(x.getChildShapes())}}},d=this,f=[];c(g.getShapes());if(0<f.length){var k=function(n,p){function x(){n<f.length-1?k(n+1,p):p()}var z=f[n],E=z.toBeCroppedImg,I=function(O,M){null==O.entries&&(O.entries=[]);for(var L=0;L<O.entries.length;L++)if(null!=O.entries[L].key.equals&&O.entries[L].key.equals(M)||