Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){k.checked&&(null==f||f.checked)?A.removeAttribute("disabled"):A.setAttribute("disabled","disabled")}));mxUtils.br(d);return{getLink:function(){return k.checked?"blank"===A.value?"_blank":z:null},getEditInput:function(){return k},getEditSelect:function(){return A}}};EditorUi.prototype.addLinkSection=function(d,f){function k(){var J=document.createElement("div");J.style.width="100%";J.style.height="100%";J.style.boxSizing="border-box";null!=A&&A!=mxConstants.NONE?(J.style.border="1px solid black",