Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
v.scrollCellToVisible(v.getSelectionCell())}}}else{J=function(N){var T=P[N];null==T&&(T=new mxCell(N,new mxGeometry(0,0,80,30),"whiteSpace=wrap;html=1;"),T.vertex=!0,P[N]=T,F.push(T));return T};var P={};F=[];for(H=0;H<t.length;H++)if(";"!=t[H].charAt(0)){var O=t[H].split("->");2<=O.length&&(C=J(O[0]),G=J(O[O.length-1]),O=new mxCell(2<O.length?O[1]:"",new mxGeometry),O.edge=!0,C.insertEdge(O,!0),G.insertEdge(O,!1),F.push(O))}if(0<F.length){t=document.createElement("div");t.style.visibility="hidden";