Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
""),mxUtils.bind(this,function(e){window.clearTimeout(c);J&&(200<=e.getStatus()&&299>=e.getStatus()?null!=m&&m():d({message:mxResources.get("realtimeCollaboration")+(0!=e.getStatus()?": "+e.getStatus():"")}))}));EditorUi.debug("DrawioFileSync.fileSaved",[this],"diff",N,R.length,"bytes","from",F,"to",L,"etag",this.file.getCurrentEtag(),"checksum",H)}}this.file.setShadowPages(b);this.scheduleCleanup()};