Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(K,U){return!1};this.alternateEdgeStyle="vertical";null==f&&this.loadStylesheet();var x=this.graphHandler.getGuideStates;this.graphHandler.getGuideStates=function(){var K=x.apply(this,arguments);if(this.graph.pageVisible){var U=[],L=this.graph.pageFormat,O=this.graph.pageScale,X=L.width*O;L=L.height*O;O=this.graph.view.translate;for(var W=this.graph.view.scale,J=this.graph.getPageLayout(),ha=0;ha<J.width;ha++)U.push(new mxRectangle(((J.x+ha)*X+O.x)*W,(J.y*L+O.y)*W,X*W,L*W));for(ha=1;ha<J.height;ha++)U.push(new mxRectangle((J.x*