Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
ca():null!=X.resp&&0<X.resp.length&&null!=X.resp[0]?aa(X.resp[0]):ia())}}catch(P){console.log(P)}});window.addEventListener("message",F)}})));d(B);B.onversionchange=function(){B.close()}}catch(F){null!=f?f(F):null!=window.console&&console.warn(F)}});u.onerror=f;u.onblocked=function(){}}catch(A){null!=f?f(A):null!=window.console&&console.error(A)}else null!=f&&f(Error("IndexedDB not supported"))}else d(this.database)};EditorUi.prototype.setDatabaseItem=function(d,f,l,u,A){this.openDatabase(mxUtils.bind(this,
function(B){try{A=A||"objects";Array.isArray(A)||(A=[A],d=[d],f=[f]);var F=B.transaction(A,"readwrite");F.oncomplete=l;F.onerror=u;for(B=0;B<A.length;B++)F.objectStore(A[B]).put(null!=d&&null!=d[B]?{key:d[B],data:f[B]}:f[B])}catch(M){null!=u&&u(M)}}),u)};EditorUi.prototype.removeDatabaseItem=function(d,f,l,u){this.openDatabase(mxUtils.bind(this,function(A){u=u||"objects";Array.isArray(u)||(u=[u],d=[d]);A=A.transaction(u,"readwrite");A.oncomplete=f;A.onerror=l;for(var B=0;B<u.length;B++)A.objectStore(u[B]).delete(d[B])}),