Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
return S};EditorUi.prototype.getXmlFileData=function(c,e,g,q){c=null!=c?c:!0;e=null!=e?e:!1;g=null!=g?g:!Editor.defaultCompressed;var p=this.editor.getGraphXml(c,q);if(c&&null!=this.fileNode&&null!=this.currentPage)if(c=function(I){var A=I.getElementsByTagName("mxGraphModel");A=0<A.length?A[0]:null;null==A&&g?(A=mxUtils.trim(mxUtils.getTextContent(I)),I=I.cloneNode(!1),0<A.length&&(A=Graph.decompress(A),null!=A&&0<A.length&&I.appendChild(mxUtils.parseXml(A).documentElement))):null==A||g?I=I.cloneNode(!0):
(I=I.cloneNode(!1),mxUtils.setTextContent(I,Graph.compressNode(A)));p.appendChild(I)},EditorUi.removeChildNodes(this.currentPage.node),mxUtils.setTextContent(this.currentPage.node,Graph.compressNode(p)),p=this.fileNode.cloneNode(!1),e)c(this.currentPage.node);else for(e=0;e<this.pages.length;e++){var t=this.pages[e],x=t.node;if(t!=this.currentPage)if(t.needsUpdate){var B=new mxCodec(mxUtils.createXmlDocument());B=B.encode(new mxGraphModel(t.root));this.editor.graph.saveViewState(t.viewState,B,null,