Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"unknown");null!=S&&null!=S.error&&null!=S.error.code&&(p+="-code_"+S.error.code);EditorUi.logEvent({category:"ERROR-SAVE-FILE-"+f.getHash()+"-rev_"+f.desc.headRevisionId+"-mod_"+f.desc.modifiedDate+"-size_"+f.getSize()+"-mime_"+f.desc.mimeType+(this.ui.editor.autosave?"":"-nosave")+(f.isAutosave()?"":"-noauto")+(f.changeListenerEnabled?"":"-nolisten")+(f.inConflictState?"-conflict":"")+(f.invalidChecksum?"-invalid":""),action:p,label:(null!=this.user?"user_"+this.user.id:"nouser")+(null!=f.sync?
"-client_"+f.sync.clientId:"-nosync")})}}catch(q){}}),d=mxUtils.bind(this,function(S){I(S);try{EditorUi.logError(S.message,null,null,null,S)}catch(p){}});if(f.isEditable()&&null!=f.desc){var g=(new Date).getTime(),n=f.desc.etag,t=f.desc.modifiedDate,u=f.desc.headRevisionId,v=this.ui.useCanvasForExport&&/(\.png)$/i.test(f.getTitle());y=null!=y?y:!1;var A=null,H=!1,L={mimeType:f.desc.mimeType,title:f.getTitle()};if(this.isGoogleRealtimeMimeType(L.mimeType))L.mimeType=this.xmlMimeType,A=f.desc,H=c=!0;