Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
parseFloat(d.getAttribute("scale"))),d.hasAttribute("dx")||d.hasAttribute("dy"))z.view.translate=new mxPoint(parseFloat(d.getAttribute("dx")||0),parseFloat(d.getAttribute("dy")||0))}else"fit"==d.nodeName&&(H=d.hasAttribute("max-scale")?parseFloat(d.getAttribute("max-scale")):1);d=d.nextSibling}}finally{A.endUpdate()}null!=H&&this.chromelessResize&&this.chromelessResize(!0,H)}return k};EditorUi.prototype.getCopyFilename=function(d,f){var k=null!=d&&null!=d.getTitle()?d.getTitle():this.defaultFilename;
d="";var v=k.lastIndexOf(".");0<=v&&(d=k.substring(v),k=k.substring(0,v));if(f){f=k;var z=new Date;k=z.getFullYear();v=z.getMonth()+1;var A=z.getDate(),H=z.getHours(),J=z.getMinutes();z=z.getSeconds();k=f+(" "+(k+"-"+v+"-"+A+"-"+H+"-"+J+"-"+z))}return k=mxResources.get("copyOf",[k])+d};EditorUi.prototype.fileLoaded=function(d,f,k){var v=this.getCurrentFile();this.fileEditable=this.fileLoadedError=null;this.setCurrentFile(null);var z=!1;this.hideDialog();null!=v&&(EditorUi.debug("File.closed",[v]),