Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!d.isOffline()&&!d.printPdfExport){var l=null==d.pages||1>=d.pages.length,n=document.createElement("div");n.style.whiteSpace="nowrap";var z=document.createElement("h3");mxUtils.write(z,mxResources.get("formatPdf"));z.style.cssText="width:100%;text-align:center;margin-top:0px;margin-bottom:4px";n.appendChild(z);var C=function(){O!=this&&this.checked?(Q.removeAttribute("disabled"),Q.checked=!u.pageVisible):(Q.setAttribute("disabled","disabled"),Q.checked=!1)};z=200;var D=1,M=null;if(d.pdfPageExport&&