Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(S){try{f(S.target.result)}catch(U){J({message:mxResources.get("errorLoadingFile")})}});da.readAsText(ma)}else this.doImportVisio(ma,f,J,v)}catch(S){J(S)}else try{""==ia.responseType||"text"==ia.responseType?J({message:ia.responseText}):(da=new FileReader,da.onload=function(){try{J({message:JSON.parse(da.result).Message})}catch(S){J(S)}},da.readAsText(ia.response))}catch(S){J({})}});ia.send(G)}else if(H.clear())try{this.doImportVisio(d,f,J,v)}catch(ma){J(ma)}}else J({message:mxResources.get("serviceUnavailableOrBlocked")})});