Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(d,f,l,u,A){this.isLocalFileSave()?this.saveLocalFile(l,d,u,A,f):this.saveRequest(d,f,mxUtils.bind(this,function(B,F){return this.createEchoRequest(l,B,u,A,f,F)}),l,A,u)};EditorUi.prototype.saveRequest=function(d,f,l,u,A,B,F){F=null!=F?F:!mxClient.IS_IOS||!navigator.standalone;var M=mxUtils.bind(this,function(ja,da,ca,ia){if("_blank"==da||null!=ja&&0<ja.length){var ma=l("_blank"==da?null:ja,da==App.MODE_DEVICE||"download"==