Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
window.console&&console.error(K,N,T)}}function k(N){if(b.shareCursorPosition&&!z.isMouseDown){var T=mxUtils.getOffset(z.container),m=z.view.translate,B=z.view.scale,K=null!=b.currentPage?b.currentPage.getId():null;c("cursor",{pageId:K,x:Math.round((N.getX()-T.x+z.container.scrollLeft)/B-m.x),y:Math.round((N.getY()-T.y+z.container.scrollTop)/B-m.y)})}}function l(N,T){var m=null!=b.currentPage?b.currentPage.getId():null;if(null!=N&&null!=N.cursor&&null!=N.lastCursor)if(null!=N.lastCursor.hide||!b.isShowRemoteCursors()||