Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
ha+.5*I):("invRound"==D||"default"==D&&"invRound"==B||"fold"==D||"default"==D&&"fold"==B)&&c.lineTo(I,ha+I):c.lineTo(0,0)};Na.prototype.paintFolds=function(c,l,u,p,t,B,D,ha,I,ua,na,Za,qb,fb,Ga){if("fold"==B||"fold"==D||"fold"==ha||"fold"==I||"fold"==ua)("fold"==D||"default"==D&&"fold"==B)&&Za&&Ga&&(c.moveTo(0,na),c.lineTo(na,na),c.lineTo(na,0)),("fold"==ha||"default"==ha&&"fold"==B)&&Za&&qb&&(c.moveTo(p-na,0),c.lineTo(p-na,na),c.lineTo(p,na)),("fold"==I||"default"==I&&"fold"==B)&&fb&&qb&&(c.moveTo(p-
na,t),c.lineTo(p-na,t-na),c.lineTo(p,t-na)),("fold"==ua||"default"==ua&&"fold"==B)&&fb&&Ga&&(c.moveTo(0,t-na),c.lineTo(na,t-na),c.lineTo(na,t))};mxCellRenderer.registerShape(Na.prototype.cst.RECT2,Na);Na.prototype.constraints=null;mxUtils.extend(bb,mxConnector);bb.prototype.origPaintEdgeShape=bb.prototype.paintEdgeShape;bb.prototype.paintEdgeShape=function(c,l,u){for(var p=[],t=0;t<l.length;t++)p.push(mxUtils.clone(l[t]));t=c.state.dashed;var B=c.state.fixDash;bb.prototype.origPaintEdgeShape.apply(this,