Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
q.setCellStyles("container","0",[G[R]]),L.push(G[R]))}finally{q.model.endUpdate()}0<L.length&&q.setSelectionCells(L)}},null,null,Editor.ctrlKey+"+Shift+U");this.addAction("removeFromGroup",function(){if(q.isEnabled()){var G=q.getSelectionCells();if(null!=G){for(var L=[],R=0;R<G.length;R++)q.isTableRow(G[R])||q.isTableCell(G[R])||L.push(G[R]);q.removeCellsFromParent(L)}}});this.addAction("edit",function(){q.isEnabled()&&q.startEditingAtCell()},null,null,"F2/Enter");this.addAction("editData...",function(){var G=