Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
A,null,null,null,v)):mxscript("js/extensions.min.js",A,null,null,null,v))};EditorUi.prototype.generatePlantUmlImage=function(d,g,n,t){function u(H,L,F){c1=H>>2;c2=(H&3)<<4|L>>4;c3=(L&15)<<2|F>>6;c4=F&63;r="";r+=v(c1&63);r+=v(c2&63);r+=v(c3&63);return r+=v(c4&63)}function v(H){if(10>H)return String.fromCharCode(48+H);H-=10;if(26>H)return String.fromCharCode(65+H);H-=26;if(26>H)return String.fromCharCode(97+H);H-=26;return 0==H?"-":1==H?"_":"?"}var A=new XMLHttpRequest;A.open("GET",("txt"==g?PLANT_URL+