Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
e.getCurrentCellStyle(D).treeMoving);return M}function v(D){var M=!1;null!=D&&(D=g.getParent(D),M=e.view.getState(D),M="tree"==(null!=M?M.style:e.getCellStyle(D)).containerType);return M}function E(D){var M=!1;null!=D&&(D=g.getParent(D),M=e.view.getState(D),e.view.getState(D),M=null!=(null!=M?M.style:e.getCellStyle(D)).childLayout);return M}function F(D){D=e.view.getState(D);if(null!=D){var M=e.getIncomingTreeEdges(D.cell);if(0<M.length&&(M=e.view.getState(M[0]),null!=M&&(M=M.absolutePoints,null!=
M&&0<M.length&&(M=M[M.length-1],null!=M)))){if(M.y==D.y&&Math.abs(M.x-D.getCenterX())<D.width/2)return mxConstants.DIRECTION_SOUTH;if(M.y==D.y+D.height&&Math.abs(M.x-D.getCenterX())<D.width/2)return mxConstants.DIRECTION_NORTH;if(M.x>D.getCenterX())return mxConstants.DIRECTION_WEST}}return mxConstants.DIRECTION_EAST}function L(D,M){M=null!=M?M:!0;e.model.beginUpdate();try{var K=e.model.getParent(D),O=e.getIncomingTreeEdges(D),V=e.cloneCells([O[0],D]);e.model.setTerminal(V[0],e.model.getTerminal(O[0],