Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"10px";H.style.resize="none";H.style.height="150px";H.style.width="440px";H.style.border="1px solid gray";H.value=mxResources.get("updatingDocument");d.appendChild(H);mxUtils.br(d);this.init=function(){window.setTimeout(function(){5E5>f.length?(H.value=f,H.focus(),mxClient.IS_GC||mxClient.IS_FF||5<=document.documentMode?H.select():document.execCommand("selectAll",!1,null)):(H.setAttribute("readonly","true"),H.value=mxResources.get("tooLargeUseDownload"))},0)};v=document.createElement("div");v.style.position=