Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var BtnDialog=function(b,f,m,d){var u=document.createElement("div");u.style.textAlign="center";var v=document.createElement("p");v.style.fontSize="16pt";v.style.padding="0px";v.style.margin="0px";v.style.color="gray";mxUtils.write(v,mxResources.get("done"));var E="Unknown",F=document.createElement("img");F.setAttribute("border","0");F.setAttribute("align","absmiddle");F.style.marginRight="10px";f==b.drive?(E=mxResources.get("googleDrive"),F.src=IMAGE_PATH+"/google-drive-logo-white.svg"):f==b.dropbox?
(E=mxResources.get("dropbox"),F.src=IMAGE_PATH+"/dropbox-logo-white.svg"):f==b.oneDrive?(E=mxResources.get("oneDrive"),F.src=IMAGE_PATH+"/onedrive-logo-white.svg"):f==b.gitHub?(E=mxResources.get("github"),F.src=IMAGE_PATH+"/github-logo-white.svg"):f==b.gitLab?(E=mxResources.get("gitlab"),F.src=IMAGE_PATH+"/gitlab-logo.svg"):f==b.trello&&(E=mxResources.get("trello"),F.src=IMAGE_PATH+"/trello-logo-white.svg");b=document.createElement("p");mxUtils.write(b,mxResources.get("authorizedIn",[E],"You are now authorized in {1}"));
m=mxUtils.button(m,d);m.insertBefore(F,m.firstChild);m.style.marginTop="6px";m.className="geBigButton";m.style.fontSize="18px";m.style.padding="14px";u.appendChild(v);u.appendChild(b);u.appendChild(m);this.container=u},FontDialog=function(b,f,m,d,u){function v(x){this.style.border="";13==x.keyCode&&t.click()}var E=document.createElement("table"),F=document.createElement("tbody");E.style.marginTop="8px";var L=document.createElement("tr");var N=document.createElement("td");N.colSpan=2;N.style.whiteSpace=