Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(H){A.stop();null!=this.exportDialog&&null!=this.exportDialog.parentNode&&(this.exportDialog.parentNode.removeChild(this.exportDialog),this.exportDialog=null);this.handleError(H)}),null,null,null,null,null,null,null,Editor.defaultBorder)}mxEvent.consume(t)}),Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(d,g,n,t,u){this.isLocalFileSave()?this.saveLocalFile(n,d,t,u,g):this.saveRequest(d,g,mxUtils.bind(this,function(v,A){return this.createEchoRequest(n,
v,t,u,g,A)}),n,u,t)};EditorUi.prototype.saveRequest=function(d,g,n,t,u,v,A){A=null!=A?A:!mxClient.IS_IOS||!navigator.standalone;var H=this.getServiceCount(!1);isLocalStorage&&H++;var L=4>=H?2:6<H?4:3;d=new CreateDialog(this,d,mxUtils.bind(this,function(F,S){if("_blank"==S||null!=F&&0<F.length){var p=n("_blank"==S?null:F,S==App.MODE_DEVICE||"download"==S||null==S||"_blank"==S?"0":"1");null!=p&&(S==App.MODE_DEVICE||"download"==S||"_blank"==S?p.simulate(document,"_blank"):this.pickFolder(S,mxUtils.bind(this,