Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){return"simple"!=Editor.currentTheme};this.menus.isShowArrangeItems=this.menus.isShowStyleItems;this.menus.isShowCellEditItems=this.menus.isShowStyleItems}c.actions.get("print").funct=function(){c.showDialog((new PrintDialog(c)).container,360,null!=c.pages&&1<c.pages.length?470:390,!0,!0)};this.defaultFilename=mxResources.get("untitledDiagram");var S=e.getExportVariables;e.getExportVariables=function(){var K=S.apply(this,arguments),O=c.getCurrentFile();null!=O&&(K.filename=O.getTitle());
K.pagecount=null!=c.pages?c.pages.length:1;K.page=null!=c.currentPage?c.currentPage.getName():"";K.pagenumber=null!=c.pages&&null!=c.currentPage?mxUtils.indexOf(c.pages,c.currentPage)+1:1;return K};var l=e.getGlobalVariable;e.getGlobalVariable=function(K){var O=c.getCurrentFile();return"filename"==K&&null!=O?O.getTitle():"page"==K&&null!=c.currentPage?c.currentPage.getName():"pagenumber"==K?null!=c.currentPage&&null!=c.pages?mxUtils.indexOf(c.pages,c.currentPage)+1:1:"pagecount"==K?null!=c.pages?