Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
TableLayout.prototype.getRowLayout=function(b,e){var g=this.graph.model.getChildCells(b,!0),n=this.graph.getActualStartSize(b,!0);b=this.getSize(g,!0);e=e-n.x-n.width;var y=[];n=n.x;for(var q=0;q<g.length;q++){var E=this.graph.getCellGeometry(g[q]);null!=E&&(n+=(null!=E.alternateBounds?E.alternateBounds.width:E.width)*e/b,y.push(Math.round(n)))}return y};