Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){return null!=this.commentsWindow&&this.commentsWindow.window.isVisible()}));d.editor.addListener("fileLoaded",mxUtils.bind(this,function(){null!=this.commentsWindow&&(this.commentsWindow.destroy(),this.commentsWindow=null)}));this.get("viewPanels").funct=function(f,u){var D=d.getCurrentFile();d.menus.addMenuItems(f,"toggleShapes format ruler - findReplace layers tags outline -".split(" "),u);d.commentsSupported()&&d.menus.addMenuItems(f,["comments"],u);null!=D&&D.isRealtimeEnabled()&&D.isRealtimeSupported()&&
d.menus.addMenuItems(f,["showRemoteCursors"],u);d.menus.addMenuItems(f,["-","fullscreen"],u)};this.put("view",new Menu(mxUtils.bind(this,function(f,u){if("simple"==Editor.currentTheme){var D=d.getCurrentFile();d.menus.addMenuItems(f,["toggleShapes","format"],u);d.isPageMenuVisible()&&d.menus.addMenuItems(f,["pageTabs"],u);d.menus.addMenuItems(f,["ruler","-","search"],u);if(isLocalStorage||mxClient.IS_CHROMEAPP){var E=d.menus.addMenuItem(f,"scratchpad",u);(!d.isOffline()||mxClient.IS_CHROMEAPP||EditorUi.isElectronApp)&&