Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0>mxUtils.indexOf(t,Ma)};this.executeLayout(function(){La.execute(I.getDefaultParent());ma()},!0,Y);Y=null}else if("organic"==ea||"auto"==ea&&Ua.length>t.length){I.view.validate();var ya=new mxFastOrganicLayout(I);ya.forceConstant=3*T;ya.disableEdgeStyle=!1;ya.resetEdges=!1;var Ja=ya.isVertexIgnored;ya.isVertexIgnored=function(Ma){return Ja.apply(this,arguments)||0>mxUtils.indexOf(t,Ma)};this.executeLayout(function(){ya.execute(I.getDefaultParent());ma()},!0,Y);Y=null}}this.hideDialog()}finally{I.model.endUpdate()}null!=