Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(function(h){(function(y){(function(A){(function(B){var m=function(){function g(){}g.conversionFactor_$LI$=function(){null==g.conversionFactor&&(g.conversionFactor=g.screenCoordinatesPerCm*g.CENTIMETERS_PER_INCHES);return g.conversionFactor};g.getDirectChildNamedElements=function(b,a){var c=[];for(b=b.firstChild;null!=b;b=b.nextSibling){var d;if(d=null!=b&&1==b.nodeType){d=a;var f=b.nodeName;d=d&&d.equals?d.equals(f):d===f}d&&c.push(b)}return c};g.getDirectChildElements=function(b){var a=[];for(b=