Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=I.errors&&0<I.errors.length&&(M="too_large"==I.errors[0].code)}catch(d){}c({message:mxResources.get(M?"drawingTooLarge":"forbidden")})}else 404===e.getStatus()?c({message:this.getErrorMessage(e,mxResources.get("fileNotFound"))}):400===e.getStatus()?c({status:400}):c({status:e.getStatus(),message:this.getErrorMessage(e,mxResources.get("error")+" "+e.getStatus())})}),mxUtils.bind(this,function(M){window.clearTimeout(D);E&&c(M)}))}),x=mxUtils.bind(this,function(y){null==this.user?this.updateUser(function(){x(!0)},