Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(L?null!=O.resp&&0<O.resp.length&&null!=O.resp[0]?(S=O.resp[0],L=!1,J()):q():null!=O.resp&&0<O.resp.length&&null!=O.resp[0]?G(O.resp[0]):C())}}catch(N){console.log(N)}});window.addEventListener("message",A)}})));d(v);v.onversionchange=function(){v.close()}}catch(A){null!=g?g(A):null!=window.console&&console.warn(A)}});t.onerror=g;t.onblocked=function(){}}catch(u){null!=g?g(u):null!=window.console&&console.error(u)}else null!=g&&g(Error("IndexedDB not supported"))}else d(this.database)};EditorUi.prototype.setDatabaseItem=