Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(z){H=z};this.setAutoScroll=function(z){R=z};this.setOpenFill=function(z){J=z};this.setStopClickEnabled=function(z){g=z};this.setSelectInserted=function(z){q=z};this.setSmoothing=function(z){m=z};this.setPerfectFreehandMode=function(z){t=z};this.isPerfectFreehandMode=function(){return t};this.setBrushSize=function(z){p.size=z};this.getBrushSize=function(){return p.size};var x=function(z){e=z;b.getRubberband().setEnabled(!z);b.graphHandler.setSelectEnabled(!z);b.graphHandler.setMoveEnabled(!z);