Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
D.readAsText(C)}else this.doImportVisio(C,e,B,q)}catch(M){B(M)}else try{""==z.responseType||"text"==z.responseType?B({message:z.responseText}):(D=new FileReader,D.onload=function(){try{B({message:JSON.parse(D.result).Message})}catch(M){B(M)}},D.readAsText(z.response))}catch(M){B({})}});z.send(A)}else if(x.clear())try{this.doImportVisio(c,e,B,q)}catch(C){B(C)}}else B({message:mxResources.get("serviceUnavailableOrBlocked")})});this.doImportVisio||this.loadingExtensions||this.isOffline(!0)?I():(this.loadingExtensions=