Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
App.prototype.exportFile=function(b,f,m,d,u,v){u==App.MODE_DROPBOX?null!=this.dropbox&&this.spinner.spin(document.body,mxResources.get("saving"))&&this.dropbox.insertFile(f,d?this.base64ToBlob(b,m):b,mxUtils.bind(this,function(){this.spinner.stop()}),mxUtils.bind(this,function(E){this.spinner.stop();this.handleError(E)})):u==App.MODE_GOOGLE?null!=this.drive&&this.spinner.spin(document.body,mxResources.get("saving"))&&this.drive.insertFile(f,b,v,mxUtils.bind(this,function(E){this.spinner.stop()}),
mxUtils.bind(this,function(E){this.spinner.stop();this.handleError(E)}),m,d):u==App.MODE_ONEDRIVE?null!=this.oneDrive&&this.spinner.spin(document.body,mxResources.get("saving"))&&this.oneDrive.insertFile(f,d?this.base64ToBlob(b,m):b,mxUtils.bind(this,function(){this.spinner.stop()}),mxUtils.bind(this,function(E){this.spinner.stop();this.handleError(E)}),!1,v):u==App.MODE_GITHUB?null!=this.gitHub&&this.spinner.spin(document.body,mxResources.get("saving"))&&this.gitHub.insertFile(f,b,mxUtils.bind(this,
function(){this.spinner.stop()}),mxUtils.bind(this,function(E){this.spinner.stop();this.handleError(E)}),!0,v,d):u==App.MODE_GITLAB?null!=this.gitHub&&this.spinner.spin(document.body,mxResources.get("saving"))&&this.gitLab.insertFile(f,b,mxUtils.bind(this,function(){this.spinner.stop()}),mxUtils.bind(this,function(E){this.spinner.stop();this.handleError(E)}),!0,v,d):u==App.MODE_TRELLO?null!=this.trello&&this.spinner.spin(document.body,mxResources.get("saving"))&&this.trello.insertFile(f,d?this.base64ToBlob(b,
m):b,mxUtils.bind(this,function(){this.spinner.stop()}),mxUtils.bind(this,function(E){this.spinner.stop();this.handleError(E)}),!1,v):u==App.MODE_BROWSER&&(m=mxUtils.bind(this,function(){localStorage.setItem(f,b)}),null==localStorage.getItem(f)?m():this.confirm(mxResources.get("replaceIt",[f]),m))};