Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var k=function(M,L){null==M.entries&&(M.entries=[]);for(var H=0;H<M.entries.length;H++)if(null!=M.entries[H].key.equals&&M.entries[H].key.equals(L)||M.entries[H].key===L)return M.entries[H].value;return null}(this.parentsMap,new h.mxgraph.io.vsdx.ShapePageId(a,f.getId()));if(null!=k){var n=g.getModel().getGeometry(k);null!=n&&(c=n.height)}var p=f.getStartXY(c),x=f.getEndXY(c);n=f.getRoutingPoints(c,p,f.getRotation());this.rotateChildEdge(g.getModel(),k,p,x,n);var z=null,E=b.getSourceToSheet();E=null!=