Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
DriveFile.prototype.saveFile=function(b,e,f,c,k,l){try{this.isEditable()?this.savingFile||(this.savingFileTime=new Date,this.setShadowModified(!1),this.savingFile=!0,this.createSecret(mxUtils.bind(this,function(x,y){var E=mxUtils.bind(this,function(D,z){try{var M=this.desc;null!=this.sync&&this.sync.fileSaving();this.ui.drive.saveFile(this,z,mxUtils.bind(this,function(I,d){try{this.savingFile=!1,0!=I?(this.setModified(this.getShadowModified()),e&&(this.lastAutosaveRevision=(new Date).getTime()),this.autosaveDelay=
Math.round(Math.min(1E4,Math.max(DriveFile.prototype.autosaveDelay,this.saveDelay))),this.desc=I,null!=y?this.fileSaved(d,M,mxUtils.bind(this,function(){this.contentChanged();null!=f&&f(I)}),c,y):null!=f&&f(I)):null!=c&&c(I)}catch(g){if(this.savingFile=!1,null!=c)c(g);else throw g;}}),mxUtils.bind(this,function(I,d){try{this.savingFile=!1,this.isConflict(I)?(this.inConflictState=!0,null!=this.sync?(this.savingFile=!0,this.sync.fileConflict(d,mxUtils.bind(this,function(){window.setTimeout(mxUtils.bind(this,
function(){this.updateFileData();this.setShadowModified(!1);E(D,!0)}),100+500*Math.random())}),mxUtils.bind(this,function(){this.savingFile=!1;null!=c&&c()}))):null!=c&&c()):null!=c&&c(I)}catch(g){if(this.savingFile=!1,null!=c)c(g);else throw g;}}),k,k,D,null,x)}catch(I){if(this.savingFile=!1,null!=c)c(I);else throw I;}});E(l,e)}))):null!=f&&f()}catch(x){if(null!=c)c(x);else throw x;}};