Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.setOpacity(T,100),N.style.visibility="",m.stop(),P())}))}else P();F.appendChild(O);++S==M&&(mxUtils.br(F),S=0)}function v(q){var C=H.value;if(null==q||null!=C&&0<C.length)t&&b.hideDialog(),f(C,q,H)}z="1"==urlParams.noDevice?!1:z;x=null!=x?x:!0;y=null!=y?y:!0;M=null!=M?M:4;t=null!=t?t:!0;l=document.createElement("div");l.style.whiteSpace="nowrap";null==c&&b.addLanguageMenu(l);var A=document.createElement("h2");mxUtils.write(A,k||mxResources.get("create"));A.style.marginTop="0px";A.style.marginBottom=