Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.lineStyles[this.variantLineIdx[this.themeVariant][b-100]-1]:this.defaultLineStyle}return c};g.prototype.getLineStyleExt=function(b,a){this.processTheme();var c=null;switch(b){case 0:case 1:case 2:case 3:case 4:case 5:case 6:c=a[b]}return c};g.prototype.getLineColor$com_mxgraph_io_vsdx_theme_QuickStyleVals$java_util_ArrayList=function(b,a){this.processTheme();var c=b.getQuickStyleLineColor();a=this.getLineStyle(b.getQuickStyleLineMatrix(),a);switch(b.getQuickStyleLineMatrix()){case 100:case 101:case 102:case 103:this.isMonotoneVariant[this.themeVariant]&&
(c=100)}c=null!=a?a.getLineColor(c,this):this.getStyleColor(c);if(0<(b.getQuickStyleVariation()&4)){a=this.getStyleColor(8).toHsl();b=this.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals(b);var d=b.toHsl(),f=c.toHsl();.1666<=Math.abs(a.getLum()-f.getLum())||(.7292>=a.getLum()?c=new h.mxgraph.io.vsdx.theme.Color(255,255,255):Math.abs(a.getLum()-d.getLum())>Math.abs(a.getLum()-f.getLum())&&(c=b))}return c};g.prototype.getLineColor=function(b,a){if((null!=b&&b instanceof h.mxgraph.io.vsdx.theme.QuickStyleVals||