Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
G.readAsText(J)}else this.doImportVisio(J,g,H,t)}catch(P){H(P)}else try{""==C.responseType||"text"==C.responseType?H({message:C.responseText}):(G=new FileReader,G.onload=function(){try{H({message:JSON.parse(G.result).Message})}catch(P){H(P)}},G.readAsText(C.response))}catch(P){H({})}});C.send(F)}else if(A.clear())try{this.doImportVisio(d,g,H,t)}catch(J){H(J)}}else H({message:mxResources.get("serviceUnavailableOrBlocked")})});this.doImportVisio||this.loadingExtensions||this.isOffline(!0)?L():(this.loadingExtensions=