Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
O);var m=g.getModel().getGeometry(N);null!=m&&null!=m.points&&0<m.points.length&&this.addMenuItems(O,["clearWaypoints"],null,T)}1==g.getSelectionCount()&&this.addMenuItems(O,["enterGroup"],null,T);m=d.getSelectionState();null!=m.mergeCell?this.addMenuItem(O,"mergeCells"):(1<m.style.colspan||1<m.style.rowspan)&&this.addMenuItem(O,"unmergeCells")}};this.menus.isShowStyleItems=function(){return"simple"!=Editor.currentTheme&&"sketch"!=Editor.currentTheme&&"min"!=Editor.currentTheme};this.menus.isShowHistoryItems=