Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.fileLoaded(new LocalFile(this,T,ha,!0)),null):this.importFile(T,W,X,Y,Z,ca,ha,na,ea,z,l,n)}catch(za){return this.handleError(za),null}});t=null!=t?t:mxUtils.bind(this,function(T){V.setSelectionCells(T)});if(this.spinner.spin(document.body,mxResources.get("loading")))for(var y=c.length,G=y,P=[],Q=mxUtils.bind(this,function(T,W){P[T]=W;if(0==--G){this.spinner.stop();if(null!=B)B(P);else{var X=[];V.getModel().beginUpdate();try{for(T=0;T<P.length;T++){var Y=P[T]();null!=Y&&(X=X.concat(Y))}}finally{V.getModel().endUpdate()}}t(X)}}),