Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
{val:"square",dispName:"Square"},{val:"rounded",dispName:"Round"},{val:"snip",dispName:"Snip"},{val:"invRound",dispName:"Inv. Round"},{val:"fold",dispName:"Fold"}]}];Na.prototype.paintVertexShape=function(c,l,u,p,t){c.translate(l,u);this.strictDrawShape(c,0,0,p,t)};Na.prototype.strictDrawShape=function(c,l,u,p,t,B){var D=B&&B.rectStyle?B.rectStyle:mxUtils.getValue(this.style,"rectStyle",this.rectStyle),ha=B&&B.absoluteCornerSize?B.absoluteCornerSize:mxUtils.getValue(this.style,"absoluteCornerSize",