Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
""),mxUtils.bind(this,function(g){window.clearTimeout(d);I&&(200<=g.getStatus()&&299>=g.getStatus()?null!=f&&f():c({message:mxResources.get("realtimeCollaboration")+(0!=g.getStatus()?": "+g.getStatus():"")}))}));EditorUi.debug("DrawioFileSync.fileSaved",[this],"diff",D,M.length,"bytes","from",y,"to",E,"etag",this.file.getCurrentEtag(),"checksum",z)}}this.file.setShadowPages(b);this.scheduleCleanup()};