Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.handleError({message:mxResources.get("errorLoadingFile")}));null!=A&&null!=A.parentNode&&0<f.length&&(A.parentNode.removeChild(A),A=null)});null!=ka&&null!=Z&&(/(\.v(dx|sdx?))($|\?)/i.test(Z)||/(\.vs(x|sx?))($|\?)/i.test(Z))?this.importVisio(ka,function(pa){ra(pa,"text/xml")},null,Z):(new XMLHttpRequest).upload&&this.isRemoteFileFormat(Y,Z)&&null!=ka?this.isExternalDataComms()?this.parseFile(ka,mxUtils.bind(this,function(pa){4==pa.readyState&&(this.spinner.stop(),200<=pa.status&&299>=pa.status?