Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.handleError({message:mxResources.get("error")+" "+z.getStatus()}))}),mxUtils.bind(this,function(z){this.handleError(z)}))}),l=mxUtils.bind(this,function(){window.clearTimeout(A);A=window.setTimeout(S,I)});this.editor.addListener("pageSelected",mxUtils.bind(this,function(){l();S()}));l();S()}null!=e&&e()});if(null!=c.url&&0<c.url.length){var t=this.editor.getProxiedUrl(c.url);this.editor.loadUrl(t,mxUtils.bind(this,function(x){p(x)}),mxUtils.bind(this,function(x){null!=g&&g(x)}))}else p("")};