Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.getServiceCount(!1);isLocalStorage&&O++;var H=4>=O?2:6<O?4:3;d=new CreateDialog(this,d,M,mxUtils.bind(this,function(){this.hideDialog()}),mxResources.get("saveAs"),mxResources.get("download"),!1,!1,F,null,1<O,H,u,B,A);F=this.isServices(O)?4<O?390:280:160;this.showDialog(d.container,420,F,!0,!0)}d.init()};EditorUi.prototype.isServices=function(d){return 1!=d};EditorUi.prototype.getEditBlankXml=function(){return this.getFileData(!0)};EditorUi.prototype.exportFile=function(d,f,l,u,A,B){};EditorUi.prototype.getServiceForName=