Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(B){x.stop();null!=this.exportDialog&&null!=this.exportDialog.parentNode&&(this.exportDialog.parentNode.removeChild(this.exportDialog),this.exportDialog=null);this.handleError(B)}),null,null,null,null,null,null,null,Editor.defaultBorder)}mxEvent.consume(q)}),Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(c,e,g,q,p){this.isLocalFileSave()?this.saveLocalFile(g,c,q,p,e):this.saveRequest(c,e,mxUtils.bind(this,function(t,x){return this.createEchoRequest(g,
t,q,p,e,x)}),g,p,q)};EditorUi.prototype.saveRequest=function(c,e,g,q,p,t,x){x=null!=x?x:!mxClient.IS_IOS||!navigator.standalone;var B=this.getServiceCount(!1);isLocalStorage&&B++;var I=4>=B?2:6<B?4:3;c=new CreateDialog(this,c,mxUtils.bind(this,function(A,S){if("_blank"==S||null!=A&&0<A.length){var l=g("_blank"==S?null:A,S==App.MODE_DEVICE||"download"==S||null==S||"_blank"==S?"0":"1");null!=l&&(S==App.MODE_DEVICE||"download"==S||"_blank"==S?l.simulate(document,"_blank"):this.pickFolder(S,mxUtils.bind(this,