Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.useCanvasForExport||".png"!=q||(q=".drawio"),".svg"===q||".xml"===q||".html"===q||".png"===q||".drawio"===q)&&(e=g+q)}c=new LocalFile(this,c,null!=urlParams.title?decodeURIComponent(urlParams.title):e,!0);c.getHash=function(){return b};this.fileLoaded(c,!0)?null!=d&&d():R()||this.handleError({message:mxResources.get("fileNotFound")},mxResources.get("errorLoadingFile"))}else R()||this.handleError({message:mxResources.get("fileNotFound")},mxResources.get("errorLoadingFile"))}),mxUtils.bind(this,