Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
U.checked,null!=ca?ca.value:null,null!=ia?ia.value:null,k.checked)}),null,mxResources.get("create"),F,M);this.showDialog(f.container,340,300+d,!0,!0);null!=ca?(ca.focus(),mxClient.IS_GC||mxClient.IS_FF||5<=document.documentMode?ca.select():document.execCommand("selectAll",!1,null)):ma.focus()};EditorUi.prototype.showRemoteExportDialog=function(d,f,l,u,A){var B=document.createElement("div");B.style.whiteSpace="nowrap";var F=document.createElement("h3");mxUtils.write(F,mxResources.get("image"));F.style.cssText=
"width:100%;text-align:center;margin-top:0px;margin-bottom:"+(A?"10":"4")+"px";B.appendChild(F);if(A){mxUtils.write(B,mxResources.get("zoom")+":");var M=document.createElement("input");M.setAttribute("type","text");M.style.marginRight="16px";M.style.width="60px";M.style.marginLeft="4px";M.style.marginRight="12px";M.value=this.lastExportZoom||"100%";B.appendChild(M);mxUtils.write(B,mxResources.get("borderWidth")+":");var O=document.createElement("input");O.setAttribute("type","text");O.style.marginRight=
"16px";O.style.width="60px";O.style.marginLeft="4px";O.value=this.lastExportBorder||"0";B.appendChild(O);mxUtils.br(B)}var H=this.addCheckbox(B,mxResources.get("selectionOnly"),!1,this.editor.graph.isSelectionEmpty()),ja=u?null:this.addCheckbox(B,mxResources.get("includeCopyOfMyDiagram"),Editor.defaultIncludeDiagram);F=this.editor.graph;var da=u?null:this.addCheckbox(B,mxResources.get("transparentBackground"),F.background==mxConstants.NONE||null==F.background);null!=da&&(da.style.marginBottom="16px");
d=new CustomDialog(this,B,mxUtils.bind(this,function(){var ca=parseInt(M.value)/100||1,ia=parseInt(O.value)||0;l(!H.checked,null!=ja?ja.checked:!1,null!=da?da.checked:!1,ca,ia)}),null,d,f);this.showDialog(d.container,300,(A?25:0)+(u?125:210),!0,!0)};EditorUi.prototype.showExportDialog=function(d,f,l,u,A,B,F,M,O){F=null!=F?F:Editor.defaultIncludeDiagram;var H=document.createElement("div");H.style.whiteSpace="nowrap";var ja=this.editor.graph,da="jpeg"==M?220:300,ca=document.createElement("h3");mxUtils.write(ca,