Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null,null,null,mxUtils.htmlEntities(mxResources.get("objectNotFound")))},X,Y)}function ca(){y(ma,ea,function(za){Z()},!0)}var da=N().pdiv,ma=b.newComment(W,b.getCurrentUser());ma.pCommentId=q.id;null==q.replies&&(q.replies=[]);var ea=I(ma,q.replies,da,G+1);Q?ca():Z()}if(P||!q.isResolved){A.style.display="none";var m=document.createElement("div");m.className="geCommentContainer";m.setAttribute("data-commentId",q.id);m.style.marginLeft=20*G+5+"px";q.isResolved&&!Editor.isDarkMode()&&(m.style.backgroundColor=