Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n.value;n.parentNode.removeChild(n);z.parentNode.removeChild(z)}catch(C){b.handleError(C)}t.innerHTML='<div style="padding-top:10px;text-align:center;"><img src="'+IMAGE_PATH+'/spin.gif" valign="middle"> '+mxUtils.htmlEntities(mxResources.get("loading"))+"...</div>";e=b.canReplyToReplies();b.commentsSupported()?b.getComments(function(C){function D(M){if(null!=M){M.sort(function(O,V){return new Date(O.modifiedDate)-new Date(V.modifiedDate)});for(var K=0;K<M.length;K++)D(M[K].replies)}}C.sort(function(M,