Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f);this.layers[parseInt(n[f].getAttribute("IX"))]=p}}this.parseNodes(b,a,"pages")}g.prototype.parseNodes=function(b,a,c){for(var d=b.firstChild;null!=d;){if(null!=d&&1==d.nodeType){var f=d,k=f.nodeName;if(function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Connects"))for(f=f.getElementsByTagName(h.mxgraph.io.vsdx.mxVsdxConstants.CONNECT),f=null!=f&&0<f.length?f.item(0):null;null!=f;){if(null!=f&&1==f.nodeType){k=f;var n=new h.mxgraph.io.vsdx.mxVsdxConnect(k),p=n.getFromSheet();this.connectsMap[p]=
!0;p=null!=p&&-1<p?function(x,z){null==x.entries&&(x.entries=[]);for(var E=0;E<x.entries.length;E++)if(null!=x.entries[E].key.equals&&x.entries[E].key.equals(z)||x.entries[E].key===z)return x.entries[E].value;return null}(this.connects,p):null;null!=p?p.addConnect(k):function(x,z,E){null==x.entries&&(x.entries=[]);for(var I=0;I<x.entries.length;I++)if(null!=x.entries[I].key.equals&&x.entries[I].key.equals(z)||x.entries[I].key===z){x.entries[I].value=E;return}x.entries.push({key:z,value:E,getKey:function(){return this.key},
getValue:function(){return this.value}})}(this.connects,n.getFromSheet(),n)}f=f.nextSibling}}d=d.nextSibling}for(d=b.firstChild;null!=d;)null!=d&&1==d.nodeType&&(f=d,k=f.nodeName,function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Rel")?this.resolveRel(f,a,c):function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"Shapes")?this.shapes=this.parseShapes(f,null,!1):function(x,z){return x&&x.equals?x.equals(z):x===z}(k,"PageSheet")&&(this.pageSheet=f)),d=d.nextSibling};g.prototype.resolveRel=function(b,