Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[1])),g.model.execute(new ChangePage(this,this.currentPage,this.currentPage,0))),this.editor.setGraphXml(d),null!=this.currentPage&&(this.currentPage.root=this.editor.graph.model.root,g.model.execute(new ChangePage(this,this.currentPage,this.currentPage,0)));if(null!=n)for(u=0;u<n.length;u++)g.model.execute(new ChangePage(this,n[u],null))}finally{g.model.endUpdate()}}};EditorUi.prototype.createFileData=function(d,g,n,t,u,v,A,H,L,F,S){g=null!=g?g:this.editor.graph;u=null!=u?u:!1;L=null!=L?L:!0;S=null!=