Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
new mxElbowEdgeHandler(c);u.snapToTerminals=!1;return u}return Cb.apply(this,arguments)};E.prototype.constraints=[];N.prototype.getConstraints=function(c,l,u){c=[];var p=Math.tan(mxUtils.toRadians(30)),t=(.5-p)/2;p=Math.min(l,u/(.5+p));l=(l-p)/2;u=(u-p)/2;c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,l,u+.25*p));c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,l+.5*p,u+p*t));c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,l+p,u+.25*p));c.push(new mxConnectionConstraint(new mxPoint(0,