Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(sa=!0,oa++);P(qa,x,z,E,(V.OL?V.LiIndex+". ":"")+ca.textContent+(sa?"\n":""))}else if(1==ca.nodeType){sa=ca.nodeName.toUpperCase();var Fa=ca.childNodes.length;qa=window.getComputedStyle(ca,null);qa={bold:"bold"==qa.getPropertyValue("font-weight")||V.bold,italic:"italic"==qa.getPropertyValue("font-style")||V.italic,underline:0<=qa.getPropertyValue("text-decoration").indexOf("underline")||V.underline,align:qa.getPropertyValue("text-align"),fontColor:qa.getPropertyValue("color"),fontSize:parseFloat(qa.getPropertyValue("font-size")),
fontFamily:qa.getPropertyValue("font-family").replace(/"/g,""),blockElem:"block"==qa.getPropertyValue("display")||"BR"==sa||"LI"==sa,OL:V.OL,LiIndex:V.LiIndex};if("UL"==sa){var ka=p.createElt("Row");ka.setAttribute("IX",J);ka.appendChild(p.createCellElem("HorzAlign","0"));ka.appendChild(p.createCellElem("Bullet","1"));z.appendChild(ka);ka=p.createElt("pp");ka.setAttribute("IX",J++);E.appendChild(ka)}else"OL"==sa?qa.OL=!0:"LI"==sa&&(qa.LiIndex=oa+1);0<Fa?(Q(ca.childNodes,qa),"UL"==sa&&(ka=p.createElt("Row"),
ka.setAttribute("IX",J),ka.appendChild(p.createCellElem("Bullet","0")),z.appendChild(ka),ka=p.createElt("pp"),ka.setAttribute("IX",J++),E.appendChild(ka)),P(qa,x,z,E,"")):P(qa,x,z,E,(V.OL?V.LiIndex+". ":"")+ca.textContent)}}};"html"==c&&mxClient.IS_SVG?(m=this.cellState.text.node.getElementsByTagName("div")[mxClient.NO_FO?0:1],null!=m&&Q(m.childNodes,{})):P({fontColor:p.cellState.style.fontColor,fontSize:p.cellState.style.fontSize,fontFamily:p.cellState.style.fontFamily},x,z,E,m);c=m=0;B=Math.max(B,