Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(K){y.apply(this,arguments);this.graph.model.isEdge(K.cell)&&1!=K.style[mxConstants.STYLE_CURVED]&&this.updateLineJumps(K)};mxGraphView.prototype.updateLineJumps=function(K){var R=K.absolutePoints;if(Graph.lineJumpsEnabled){var W=null!=K.routedPoints,d=null;if(null!=R&&null!=this.validEdges&&"none"!==mxUtils.getValue(K.style,"jumpStyle","none")){var f=function(ia,ma,da){var S=new mxPoint(ma,da);S.type=ia;d.push(S);S=null!=K.routedPoints?K.routedPoints[d.length-1]:null;return null==S||S.type!=
ia||S.x!=ma||S.y!=da},k=.5*this.scale;W=!1;d=[];for(var v=0;v<R.length-1;v++){for(var z=R[v+1],A=R[v],H=[],J=R[v+2];v<R.length-2&&mxUtils.ptSegDistSq(A.x,A.y,J.x,J.y,z.x,z.y)<1*this.scale*this.scale;)z=J,v++,J=R[v+2];W=f(0,A.x,A.y)||W;for(var O=0;O<this.validEdges.length;O++){var G=this.validEdges[O],ja=G.absolutePoints;if(null!=ja&&mxUtils.intersects(K,G)&&"1"!=G.style.noJump)for(G=0;G<ja.length-1;G++){var fa=ja[G+1],ca=ja[G];for(J=ja[G+2];G<ja.length-2&&mxUtils.ptSegDistSq(ca.x,ca.y,J.x,J.y,fa.x,
fa.y)<1*this.scale*this.scale;)fa=J,G++,J=ja[G+2];J=mxUtils.intersection(A.x,A.y,z.x,z.y,ca.x,ca.y,fa.x,fa.y);if(null!=J&&(Math.abs(J.x-A.x)>k||Math.abs(J.y-A.y)>k)&&(Math.abs(J.x-z.x)>k||Math.abs(J.y-z.y)>k)){fa=J.x-A.x;ca=J.y-A.y;J={distSq:fa*fa+ca*ca,x:J.x,y:J.y};for(fa=0;fa<H.length;fa++)if(H[fa].distSq>J.distSq){H.splice(fa,0,J);J=null;break}null==J||0!=H.length&&H[H.length-1].x===J.x&&H[H.length-1].y===J.y||H.push(J)}}}for(G=0;G<H.length;G++)W=f(1,H[G].x,H[G].y)||W}J=R[R.length-1];W=f(0,J.x,
J.y)||W}K.routedPoints=d;return W}return!1};var q=mxConnector.prototype.paintLine;mxConnector.prototype.paintLine=function(K,R,W){this.routedPoints=null!=this.state?this.state.routedPoints:null;if(this.outline||null==this.state||null==this.style||null==this.state.routedPoints||0==this.state.routedPoints.length)q.apply(this,arguments);else{var d=mxUtils.getValue(this.style,mxConstants.STYLE_ARCSIZE,mxConstants.LINE_ARCSIZE)/2,f=(parseInt(mxUtils.getValue(this.style,"jumpSize",Graph.defaultJumpSize))-