Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n.equals(p):n===p}(f,h.mxgraph.io.vsdx.mxVsdxConstants.TYPE_GROUP)||function(n,p){return n&&n.equals?n.equals(p):n===p}(f,h.mxgraph.io.vsdx.mxVsdxConstants.FOREIGN))){var k=b.getId();if(b.isVertex()){f=null;f=b.isGroup()?this.addGroup(g,b,a,c,d):this.addVertex(g,b,a,c,d);(function(n,p,x){null==n.entries&&(n.entries=[]);for(var z=0;z<n.entries.length;z++)if(null!=n.entries[z].key.equals&&n.entries[z].key.equals(p)||n.entries[z].key===p){n.entries[z].value=x;return}n.entries.push({key:p,value:x,getKey:function(){return this.key},