Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxConstants.NONE,null,null,null,10,null,null,!1,null,0<d.length?d:null)}catch(u){this.handleError(u)}};EditorUi.prototype.writeImageToClipboard=function(d,f,l,u){var A=this.base64ToBlob(d.substring(d.indexOf(",")+1),"image/png");d=new ClipboardItem({"image/png":A,"text/html":new Blob(['<img src="'+d+'" width="'+f+'" height="'+l+'">'],{type:"text/html"})});navigator.clipboard.write([d])["catch"](u)};EditorUi.prototype.copyCells=function(d,f){var l=this.editor.graph;if(l.isSelectionEmpty())d.innerText=
"";else{var u=mxUtils.sortCells(l.model.getTopmostCells(l.getSelectionCells())),A=mxUtils.getXml(l.encodeCells(u));mxUtils.setTextContent(d,encodeURIComponent(A));f?(l.removeCells(u,!1),l.lastPasteXml=null):(l.lastPasteXml=A,l.pasteCounter=0);d.focus();document.execCommand("selectAll",!1,null)}};EditorUi.prototype.copyXml=function(){var d=null;if(Editor.enableNativeCipboard){var f=this.editor.graph;f.isSelectionEmpty()||(d=mxUtils.sortCells(f.getExportableCells(f.model.getTopmostCells(f.getSelectionCells()))),