Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"#000000")),ta=mxUtils.setStyle(ta,mxConstants.STYLE_GRADIENTCOLOR,mxUtils.getValue(oa,mxConstants.STYLE_GRADIENTCOLOR,null)),R.getModel().isVertex(ya[xa])&&(ta=mxUtils.setStyle(ta,mxConstants.STYLE_FONTCOLOR,mxUtils.getValue(oa,mxConstants.STYLE_FONTCOLOR,null))));R.getModel().setStyle(ya[xa],ta)}}finally{R.getModel().endUpdate()}}));ba.className="geStyleButton";ba.style.width="36px";ba.style.height=10>=this.defaultColorSchemes.length?"24px":"30px";ba.style.margin="0px 6px 6px 0px";if(null!=Ca){var fa=