Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d)+"px",F.style.top=Math.max(0,g+70)+"px",mxUtils.setPrefixedStyle(F.style,"borderRadius","6px"),mxUtils.setPrefixedStyle(F.style,"transform","translate(-50%,-50%)"),Editor.isDarkMode()||mxUtils.setPrefixedStyle(F.style,"boxShadow","2px 2px 3px 0px #ddd"),"..."!=L.substring(L.length-3,L.length)&&"!"!=L.charAt(L.length-1)&&(L+="..."),F.innerHTML=L,H.appendChild(F),u.status=F),this.pause=mxUtils.bind(this,function(){var S=function(){};this.active&&(S=mxUtils.bind(this,function(){this.spin(H,L)}));this.stop();