Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){return null!=this.commentsWindow&&this.commentsWindow.window.isVisible()}));c.editor.addListener("fileLoaded",mxUtils.bind(this,function(){null!=this.commentsWindow&&(this.commentsWindow.destroy(),this.commentsWindow=null)}));this.get("viewPanels").funct=function(l,y){var J=c.getCurrentFile();c.menus.addMenuItems(l,"toggleShapes format ruler - findReplace layers tags outline -".split(" "),y);c.commentsSupported()&&c.menus.addMenuItems(l,["comments"],y);null!=J&&J.isRealtimeEnabled()&&J.isRealtimeSupported()&&
c.menus.addMenuItems(l,["showRemoteCursors"],y);c.menus.addMenuItems(l,["-","fullscreen"],y)};this.put("view",new Menu(mxUtils.bind(this,function(l,y){if("simple"==Editor.currentTheme){var J=c.getCurrentFile();c.menus.addMenuItems(l,["toggleShapes","format"],y);c.isPageMenuVisible()&&c.menus.addMenuItems(l,["pageTabs"],y);c.menus.addMenuItems(l,["ruler","-","search"],y);if(isLocalStorage||mxClient.IS_CHROMEAPP){var G=c.menus.addMenuItem(l,"scratchpad",y);(!c.isOffline()||mxClient.IS_CHROMEAPP||EditorUi.isElectronApp)&&