Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
window.console&&console.error(K,N,T)}}function k(N){if(b.shareCursorPosition&&!z.isMouseDown){var T=mxUtils.getOffset(z.container),m=z.view.translate,B=z.view.scale,K=null!=b.currentPage?b.currentPage.getId():null;c("cursor",{pageId:K,x:Math.round((N.getX()-T.x+z.container.scrollLeft)/B-m.x),y:Math.round((N.getY()-T.y+z.container.scrollTop)/B-m.y)})}}function l(N,T){var m=null!=b.currentPage?b.currentPage.getId():null;if(null!=N&&null!=N.cursor&&null!=N.lastCursor)if(null!=N.lastCursor.hide||!b.isShowRemoteCursors()||
null!=N.lastCursor.pageId&&N.lastCursor.pageId!=m)N.cursor.style.display="none";else{m=function(){var Q=Math.max(z.container.scrollLeft,Math.min(z.container.scrollLeft+z.container.clientWidth-N.cursor.clientWidth,R)),V=Math.max(z.container.scrollTop-22,Math.min(z.container.scrollTop+z.container.clientHeight-N.cursor.clientHeight,U));W.style.opacity=Q!=R||V!=U?0:1;N.cursor.style.left=Q+"px";N.cursor.style.top=V+"px";N.cursor.style.display=""};var B=z.view.translate,K=z.view.scale,R=(B.x+N.lastCursor.x)*
K+8,U=(B.y+N.lastCursor.y)*K-12,W=N.cursor.getElementsByTagName("img")[0];T?(mxUtils.setPrefixedStyle(N.cursor.style,"transition","all 900ms ease-out"),mxUtils.setPrefixedStyle(W.style,"transition","all 900ms ease-out"),window.setTimeout(m,0)):(mxUtils.setPrefixedStyle(N.cursor.style,"transition",null),mxUtils.setPrefixedStyle(W.style,"transition",null),m())}}function x(N,T){try{var m=function(){if(null==g[K]){var Z=A[K];null==Z&&(Z=M%d.length,A[K]=Z,M++);var ca=d[Z];Z=11<Z?"black":"white";g[K]={cursor:document.createElement("div"),