Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
F=document.createElement("div");F.style.height="300px";F.style.width="300px";F.style.display="inline-flex";F.style.justifyContent="center";F.style.alignItems="center";F.style.position="absolute";var L=document.createElement("img");L.onload=function(){function A(){H.model.setStyle(c,e+u())}H=new Graph(N);H.autoExtend=!1;H.autoScroll=!1;H.setGridEnabled(!1);H.setEnabled(!0);H.setPanning(!1);H.setConnectable(!1);H.getRubberband().setEnabled(!1);H.graphHandler.allowLivePreview=!1;var S=H.createVertexHandler;