Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.fontElementMap[d]=k}};g.prototype.getColor=function(b){var a=function(c,d){return c[d]?c[d]:null}(this.colorElementMap,b);return null==a&&(a=function(c,d){return c[d]?c[d]:null}(g.defaultColors_$LI$(),b),null==a)?"":a};g.prototype.getFont=function(b){var a=this.fontElementMap;b=a[b]?a[b]:null;return null==b?"":b};return g}();m.__static_initialized=!1;B.mxPropertiesManager=m;m.__class="com.mxgraph.io.vsdx.mxPropertiesManager"})(A.vsdx||(A.vsdx={}))})(y.io||(y.io={}))})(h.mxgraph||(h.mxgraph={}))})(com||