Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
R.keyCode&&n.destroy()}),q=this.initialOverflow,E=n.destroy;n.destroy=function(){mxEvent.removeListener(document.documentElement,"keydown",y);document.body.removeChild(b);document.body.removeChild(e);document.body.style.overflow=q;GraphViewer.resizeSensorEnabled=!0;E.apply(this,arguments)};var N=n.editor.graph,T=N.container;T.style.overflow="hidden";this.lightboxChrome?(T.style.border="1px solid #c0c0c0",T.style.margin="40px",mxEvent.addListener(document.documentElement,"keydown",y)):(b.style.display=