Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!0;p=null!=p&&-1<p?function(x,z){null==x.entries&&(x.entries=[]);for(var E=0;E<x.entries.length;E++)if(null!=x.entries[E].key.equals&&x.entries[E].key.equals(z)||x.entries[E].key===z)return x.entries[E].value;return null}(this.connects,p):null;null!=p?p.addConnect(k):function(x,z,E){null==x.entries&&(x.entries=[]);for(var I=0;I<x.entries.length;I++)if(null!=x.entries[I].key.equals&&x.entries[I].key.equals(z)||x.entries[I].key===z){x.entries[I].value=E;return}x.entries.push({key:z,value:E,getKey:function(){return this.key},