Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxResources.get("reconnecting"))?window.location.search=this.getSearch(["url"]):null!=q?this.fileLoaded(q)||t():t()});e?c():this.handleError(B,mxResources.get("errorLoadingFile"),c,!0,null,null,!0)}else t();return p};EditorUi.prototype.getHashValueForPages=function(c,e){var g=0,q=new mxGraphModel,p=new mxCodec;null!=e&&(e.byteCount=0,e.attrCount=0,e.eltCount=0,e.nodeCount=0);for(var t=0;t<c.length;t++){this.updatePageRoot(c[t]);var x=c[t].node.cloneNode(!1);x.removeAttribute("name");q.root=c[t].root;
var B=p.encode(q);this.editor.graph.saveViewState(c[t].viewState,B,!0);B.removeAttribute("pageWidth");B.removeAttribute("pageHeight");x.appendChild(B);null!=e&&(e.eltCount+=x.getElementsByTagName("*").length,e.nodeCount+=x.getElementsByTagName("mxCell").length);g=(g<<5)-g+this.hashValue(x,function(I,A,S,l){return!l||"mxGeometry"!=I.nodeName&&"mxPoint"!=I.nodeName||"x"!=A&&"y"!=A&&"width"!=A&&"height"!=A?l&&"mxCell"==I.nodeName&&"previous"==A?null:S:Math.round(S)},e)<<0}return g};EditorUi.prototype.hashValue=