Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f.prev.getId():"";null!=f.page.getName()&&b[L].getName()!=f.page.getName()&&(R.name=f.page.getName());mxUtils.isEmptyObject(R)||(E[N]=R)}delete v[b[L].getId()];F=b[L]}for(N in v)f=v[N],m.push({data:mxUtils.getXml(f.page.node),previous:null!=f.prev?f.prev.getId():""});mxUtils.isEmptyObject(E)||(u[EditorUi.DIFF_UPDATE]=E);0<d.length&&(u[EditorUi.DIFF_REMOVE]=d);0<m.length&&(u[EditorUi.DIFF_INSERT]=m)}return u};