Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(T,Z){try{var ba=this.editor.graph.pageVisible;0==B&&(this.editor.graph.pageVisible=B);var ha=this.createDownloadRequest(T,d,u,Z,F,A,M,O,H,ja,da,P,U);this.editor.graph.pageVisible=ba;return ha}catch(qa){this.handleError(qa)}}))}else{var k=null,z=mxUtils.bind(this,function(T){T.length<=MAX_REQUEST_SIZE?this.saveData(ia,"svg",T,"image/svg+xml"):this.handleError({message:mxResources.get("drawingTooLarge")},mxResources.get("error"),mxUtils.bind(this,function(){mxUtils.popup(k)}))});if("svg"==