Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.sidebar.showEntries("search")):(this.sidebar.showPalette("search",mxSettings.settings.search),this.editor.chromeless&&!this.editor.editable||!(mxSettings.settings.isNew||8>=parseInt(mxSettings.settings.version||0))||(this.toggleScratchpad(),mxSettings.save())));this.addListener("formatWidthChanged",function(){mxSettings.setFormatWidth(this.formatWidth);mxSettings.save()})}};EditorUi.prototype.copyImage=function(d,f,l){try{null!=navigator.clipboard&&"function"===typeof window.ClipboardItem&&this.spinner.spin(document.body,
mxResources.get("exporting"))&&this.editor.exportToCanvas(mxUtils.bind(this,function(u,A){try{this.spinner.stop();var B=this.createImageDataUri(u,f,"png"),F=parseInt(A.getAttribute("width")),M=parseInt(A.getAttribute("height"));this.writeImageToClipboard(B,F,M,mxUtils.bind(this,function(O){this.handleError(O)}))}catch(O){this.handleError(O)}}),null,null,null,mxUtils.bind(this,function(u){this.spinner.stop();this.handleError(u)}),null,null,null!=l?l:4,null==this.editor.graph.background||this.editor.graph.background==
mxConstants.NONE,null,null,null,10,null,null,!1,null,0<d.length?d:null)}catch(u){this.handleError(u)}};EditorUi.prototype.writeImageToClipboard=function(d,f,l,u){var A=this.base64ToBlob(d.substring(d.indexOf(",")+1),"image/png");d=new ClipboardItem({"image/png":A,"text/html":new Blob(['<img src="'+d+'" width="'+f+'" height="'+l+'">'],{type:"text/html"})});navigator.clipboard.write([d])["catch"](u)};EditorUi.prototype.copyCells=function(d,f){var l=this.editor.graph;if(l.isSelectionEmpty())d.innerText=