Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d,!0,!0);null!=ca?(ca.focus(),mxClient.IS_GC||mxClient.IS_FF||5<=document.documentMode?ca.select():document.execCommand("selectAll",!1,null)):ma.focus()};EditorUi.prototype.showRemoteExportDialog=function(d,f,k,v,z){var A=document.createElement("div");A.style.whiteSpace="nowrap";var H=document.createElement("h3");mxUtils.write(H,mxResources.get("image"));H.style.cssText="width:100%;text-align:center;margin-top:0px;margin-bottom:"+(z?"10":"4")+"px";A.appendChild(H);if(z){mxUtils.write(A,mxResources.get("zoom")+
":");var J=document.createElement("input");J.setAttribute("type","text");J.style.marginRight="16px";J.style.width="60px";J.style.marginLeft="4px";J.style.marginRight="12px";J.value=this.lastExportZoom||"100%";A.appendChild(J);mxUtils.write(A,mxResources.get("borderWidth")+":");var O=document.createElement("input");O.setAttribute("type","text");O.style.marginRight="16px";O.style.width="60px";O.style.marginLeft="4px";O.value=this.lastExportBorder||"0";A.appendChild(O);mxUtils.br(A)}var G=this.addCheckbox(A,
mxResources.get("selectionOnly"),!1,this.editor.graph.isSelectionEmpty()),ja=v?null:this.addCheckbox(A,mxResources.get("includeCopyOfMyDiagram"),Editor.defaultIncludeDiagram);H=this.editor.graph;var fa=v?null:this.addCheckbox(A,mxResources.get("transparentBackground"),H.background==mxConstants.NONE||null==H.background);null!=fa&&(fa.style.marginBottom="16px");d=new CustomDialog(this,A,mxUtils.bind(this,function(){var ca=parseInt(J.value)/100||1,ia=parseInt(O.value)||0;k(!G.checked,null!=ja?ja.checked:
!1,null!=fa?fa.checked:!1,ca,ia)}),null,d,f);this.showDialog(d.container,300,(z?25:0)+(v?125:210),!0,!0)};EditorUi.prototype.showExportDialog=function(d,f,k,v,z,A,H,J,O){H=null!=H?H:Editor.defaultIncludeDiagram;var G=document.createElement("div");G.style.whiteSpace="nowrap";var ja=this.editor.graph,fa="jpeg"==J?220:300,ca=document.createElement("h3");mxUtils.write(ca,d);ca.style.cssText="width:100%;text-align:center;margin-top:0px;margin-bottom:10px";G.appendChild(ca);mxUtils.write(G,mxResources.get("zoom")+