Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.extractGraphModelFromXref(W));null!=K&&(K=decodeURIComponent(K.replace(/\\\(/g,"(").replace(/\\\)/g,")")));return K};Editor.extractGraphModelFromXref=function(m){var B=m.trailer,K=null;null!=B&&(B=/.* \/Info (\d+) (\d+) R/g.exec(B.join("\n")),null!=B&&0<B.length&&(B=m[B[1]],null!=B&&(B=/.* \/Subject (\d+) (\d+) R/g.exec(B.join("\n")),null!=B&&0<B.length&&(m=m[B[1]],null!=m&&(m=m.join("\n"),K=m.substring(1,m.length-1))))));return K};Editor.extractParserError=function(m,B){var K=null;m=null!=
m?m.getElementsByTagName("parsererror"):null;null!=m&&0<m.length&&(K=B||mxResources.get("invalidChars"),B=m[0].getElementsByTagName("div"),0<B.length&&(K=mxUtils.getTextContent(B[0])));return null!=K?mxUtils.trim(K):K};Editor.addRetryToError=function(m,B){null!=m&&(m=null!=m.error?m.error:m,null==m.retry&&(m.retry=B))};Editor.mermaidToDrawio=function(m,B,K){if("function"===typeof mxMermaidToDrawio)return mxMermaidToDrawio(m,B,K)};Editor.configure=function(m){if(null!=m){Editor.config=m;Editor.configVersion=