Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Uint8Array.from||(Uint8Array.from=function(){var b=Object.prototype.toString,e=function(n){return"function"===typeof n||"[object Function]"===b.call(n)},g=Math.pow(2,53)-1;return function(n){var y=Object(n);if(null==n)throw new TypeError("Array.from requires an array-like object - not null or undefined");var q=1<arguments.length?arguments[1]:void 0,E;if("undefined"!==typeof q){if(!e(q))throw new TypeError("Array.from: when provided, the second argument must be a function");2<arguments.length&&(E=
arguments[2])}var N=Number(y.length);N=isNaN(N)?0:0!==N&&isFinite(N)?(0<N?1:-1)*Math.floor(Math.abs(N)):N;N=Math.min(Math.max(N,0),g);for(var T=e(this)?Object(new this(N)):Array(N),F=0,K;F<N;)K=y[F],T[F]=q?"undefined"===typeof E?q(K,F):q.call(E,K,F):K,F+=1;T.length=N;return T}}());mxConstants.POINTS=1;mxConstants.MILLIMETERS=2;mxConstants.INCHES=3;mxConstants.METERS=4;mxConstants.PIXELS_PER_MM=3.937;mxConstants.PIXELS_PER_INCH=100;mxConstants.SHADOW_OPACITY=.25;mxConstants.SHADOWCOLOR="#000000";