Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
B.editor.addListener("resetGraphView",qa);B.editor.addListener("pageSelected",qa);B.editor.graph.addListener("zoomPreview",mxUtils.bind(this,function(ra,pa){qa(ra,pa,pa.getProperty("factor"))}))})(Z);var ba=B.setGraphEnabled;B.setGraphEnabled=function(){ba.apply(this,arguments);null!=this.tabContainer&&(Z.style.visibility=this.tabContainer.style.visibility,this.diagramContainer.style.bottom="0"!=urlParams.pages&&"hidden"!=this.tabContainer.style.visibility?this.tabContainerHeight+"px":"0px")}}A.appendChild(M);