Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
document.body.clientHeight)-80,800),null!=ia.title?mxResources.get(ia.title,null,ia.title):null,!0,new mxPoint(La,Ga),!0,null,!0);var Ma=document.createElement("div");Ma.className="geTempDlgDialogMask";O.appendChild(Ma);var ra=b.sidebar.hideTooltip;b.sidebar.hideTooltip=function(){Ma&&(O.removeChild(Ma),Ma=null,ra.apply(this,arguments),b.sidebar.hideTooltip=ra)};mxEvent.addListener(Ma,"click",function(){b.sidebar.hideTooltip()})}}var ja=null;if(pa||b.sidebar.currentElt==aa)b.sidebar.hideTooltip();