Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(S,U){return!1};this.alternateEdgeStyle="vertical";null==n&&this.loadStylesheet();var R=this.graphHandler.getGuideStates;this.graphHandler.getGuideStates=function(){var S=R.apply(this,arguments);if(this.graph.pageVisible){var U=[],Q=this.graph.pageFormat,Y=this.graph.pageScale,m=Q.width*Y;Q=Q.height*Y;Y=this.graph.view.translate;for(var C=this.graph.view.scale,M=this.graph.getPageLayout(),ba=0;ba<M.width;ba++)U.push(new mxRectangle(((M.x+ba)*m+Y.x)*C,(M.y*Q+Y.y)*C,m*C,Q*C));for(ba=1;ba<M.height;ba++)U.push(new mxRectangle((M.x*