Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
e.prev.getId():"";null!=e.page.getName()&&b[E].getName()!=e.page.getName()&&(M.name=e.page.getName());mxUtils.isEmptyObject(M)||(x[D]=M)}delete l[b[E].getId()];y=b[E]}for(D in l)e=l[D],f.push({data:mxUtils.getXml(e.page.node),previous:null!=e.prev?e.prev.getId():""});mxUtils.isEmptyObject(x)||(k[EditorUi.DIFF_UPDATE]=x);0<c.length&&(k[EditorUi.DIFF_REMOVE]=c);0<f.length&&(k[EditorUi.DIFF_INSERT]=f)}return k};