Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
z&&(z=0);return p.substr(z,x.length)===x}(b[k]?b[k]:null,"rounded="))try{c=c+k+a}catch(p){}c=c+n+";"}return c};g.surroundByTags=function(b,a,c){return"<"+a+(c?' style="'+c+'"':"")+">"+b+"</"+a+">"};g.htmlEntities=function(b){return b.replace(RegExp("&","g"),"&amp;").replace(RegExp('"',"g"),"&quot;").replace(RegExp("'","g"),"&prime;").replace(RegExp("<","g"),"&lt;").replace(RegExp(">","g"),"&gt;")};g.toInitialCapital=function(b){b=b.split(" ");for(var a="",c=0;c<b.length;c++){var d=b[c],f=d.substring(0,
1);d=d.substring(1);f=f.toUpperCase();a+=f+d}return a.substring(0,a.length)};g.toSmallCaps=function(b,a){var c="",d=c;if(a&&a.equals?a.equals(d):a===d)c=b;else for(b=b.split(""),d=0;d<b.length;d++){var f=b[d];(null==f.charCodeAt?f:f.charCodeAt(0))>=(null=="a".charCodeAt?"a":97)&&(null==f.charCodeAt?f:f.charCodeAt(0))<=(null=="z".charCodeAt?"z":122)?(f=(new String(f)).toString(),f=f.toUpperCase(),c+='<font style="font-size:'+parseFloat(a)/1.28+'px">'+f+"</font>"):c+=f}return c};g.getStyleMap=function(b,