Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.ui.showDialog(A.container,300,80,!0,!1);A.init()}))),mxUtils.br(y));for(var v=0;v<u.length;v++)mxUtils.bind(this,function(A){y.appendChild(E(A.name,mxUtils.bind(this,function(){b?(f=A.id,z()):(this.ui.hideDialog(),e(A.id))})))})(u[v]);100==u.length&&(y.appendChild(M),I=function(){y.scrollTop>=y.scrollHeight-y.offsetHeight&&n()},mxEvent.addListener(y,"scroll",I))}}),mxUtils.bind(this,function(u){401==u.status?this.authenticate(t,D,!0):null!=D&&D({message:u.responseText})}))});t()});d()};