Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0;U<T.length;U++)T[U].parentNode.removeChild(T[U]);R(k);k.style.opacity="0.5"}else{T=O(n).replies;for(U=0;U<T.length;U++)t.removeChild(T[U]);for(U=0;U<z.length;U++)if(z[U]==n){z.splice(U,1);break}x.style.display=0==t.getElementsByTagName("div").length?"block":"none"}},function(U){H(k);b.handleError(U,null,null,null,mxUtils.htmlEntities(mxResources.get("objectNotFound")))})})},n.isResolved));c||n.isLocked||0!=D||K(n.isResolved?mxResources.get("reopen"):mxResources.get("resolve"),function(U){function T(){var W=
U.target;W.innerText="";n.isResolved=!n.isResolved;mxUtils.write(W,n.isResolved?mxResources.get("reopen"):mxResources.get("resolve"));for(var X=n.isResolved?"none":"",Y=O(n).replies,Z=Editor.isDarkMode()?"transparent":n.isResolved?"ghostWhite":"white",ca=0;ca<Y.length;ca++){Y[ca].style.backgroundColor=Z;for(var ha=Y[ca].querySelectorAll(".geCommentAction"),na=0;na<ha.length;na++)ha[na]!=W.parentNode&&(ha[na].style.display=X);A||(Y[ca].style.display="none")}E()}n.isResolved?V(mxResources.get("reOpened")+