Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.bind(this,function(){this.hideDialog()}),mxResources.get("saveAs"),mxResources.get("download"),!1,!1,A,null,1<H,L,t,v,u);H=this.isServices(H)?4<H?390:280:160;this.showDialog(d.container,420,H,!0,!0);d.init()};EditorUi.prototype.isServices=function(d){return 1!=d};EditorUi.prototype.getEditBlankXml=function(){return this.getFileData(!0)};EditorUi.prototype.exportFile=function(d,g,n,t,u,v){};EditorUi.prototype.pickFolder=function(d,g,n){g(null)};EditorUi.prototype.exportSvg=function(d,g,n,t,