Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(X){f.saveLevel=7;try{if(null!=X&&X.etag==T)if(M<this.staleEtagMaxRetries){M++;var Y=Math.round(2*M*this.coolOff*(1+.1*(Math.random()-.5)));window.setTimeout(B,Y);"1"==urlParams.test&&EditorUi.debug("DriveClient: Stale Etag Detected","retry",M,"delay",Y)}else{B(!0);try{EditorUi.logEvent({category:"STALE-ETAG-SAVE-FILE-"+f.getHash(),action:"rev_"+f.desc.headRevisionId+"-mod_"+f.desc.modifiedDate+"-size_"+f.getSize()+"-mime_"+f.desc.mimeType+(this.ui.editor.autosave?"":"-nosave")+(f.isAutosave()?
"":"-noauto")+(f.changeListenerEnabled?"":"-nolisten")+(f.inConflictState?"-conflict":"")+(f.invalidChecksum?"-invalid":""),label:(null!=this.user?"user_"+this.user.id:"nouser")+(null!=f.sync?"-client_"+f.sync.clientId:"-nosync")})}catch(Z){}}else"1"==urlParams.test&&X.headRevisionId==u&&EditorUi.debug("DriveClient: Remote Etag Changed","local",T,"remote",X.etag,"rev",f.desc.headRevisionId,"response",[X],"file",[f]),I(V,X)}catch(Z){d(Z)}}),mxUtils.bind(this,function(){I(V)})):I(V)}catch(X){d(X)}}}))}catch(V){d(V)}}),