Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
k?k.getElementsByTagName("parsererror"):null;null!=k&&0<k.length&&(G=y||mxResources.get("invalidChars"),y=k[0].getElementsByTagName("div"),0<y.length&&(G=mxUtils.getTextContent(y[0])));return null!=G?mxUtils.trim(G):G};Editor.addRetryToError=function(k,y){null!=k&&(k=null!=k.error?k.error:k,null==k.retry&&(k.retry=y))};Editor.mermaidToDrawio=function(k,y,G){if("function"===typeof mxMermaidToDrawio)return mxMermaidToDrawio(k,y,G)};Editor.configure=function(k){if(null!=k){Editor.config=k;Editor.configVersion=