Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxStencilRegistry.getStencil(Z)}return D.apply(this,arguments)};var M=mxStencil.prototype.drawShape;mxStencil.prototype.drawShape=function(k,y,G,P,Q,U){"1"==mxUtils.getValue(y.style,"lineShape",null)&&k.setFillColor(mxUtils.getValue(y.style,mxConstants.STYLE_STROKECOLOR,this.stroke));return M.apply(this,arguments)};PrintDialog.prototype.create=function(k,y){function G(){ha.value=Math.max(1,Math.min(W,Math.max(parseInt(ha.value),parseInt(ca.value))));ca.value=Math.max(1,Math.min(W,Math.min(parseInt(ha.value),