Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null,null,function(Q){console.log(Q)},600,null,null,null,null,null,J):(x(G,void 0),l(G))}function u(Q){function V(X){R.style.background="transparent";R.innerText="";var Y=document.createElement("div");Y.className="odPreviewStatus";mxUtils.write(Y,X);R.appendChild(Y);q.stop()}if(null!=R)if(R.style.background="transparent",R.innerText="",null==Q||Q.folder||/\.drawiolib$/.test(Q.name))V(mxResources.get("noPreview"));else try{null!=Q.remoteItem&&(Q=Q.remoteItem),m=Q,q.spin(R),n(Q,function(X){q.stop();