Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Y=[];null!=Q;){var m=Q.nextSibling;0>mxUtils.indexOf(this.toolbar.staticElements,Q)&&(Q.parentNode.removeChild(Q),Y.push(Q));Q=m}Q=this.toolbar.fontMenu;m=this.toolbar.sizeMenu;if(null==fa)this.toolbar.createTextToolbar();else{for(var C=0;C<fa.length;C++)this.toolbar.container.appendChild(fa[C]);this.toolbar.fontMenu=G;this.toolbar.sizeMenu=ja}O=y.cellEditor.isContentEditing();G=Q;ja=m;fa=Y}}),ia=y.cellEditor.startEditing;y.cellEditor.startEditing=function(){ia.apply(this,arguments);ca();if(y.cellEditor.isContentEditing()){var Q=
!1,Y=function(){Q||(Q=!0,window.setTimeout(function(){var m=y.getSelectedEditingElement();null!=m&&(m=mxUtils.getCurrentStyle(m),null!=m&&null!=n.toolbar&&(n.toolbar.setFontName(Graph.stripQuotes(m.fontFamily)),n.toolbar.setFontSize(parseInt(m.fontSize))));Q=!1},0))};mxEvent.addListener(y.cellEditor.textarea,"input",Y);mxEvent.addListener(y.cellEditor.textarea,"touchend",Y);mxEvent.addListener(y.cellEditor.textarea,"mouseup",Y);mxEvent.addListener(y.cellEditor.textarea,"keyup",Y);Y()}};var ma=y.cellEditor.stopEditing;