Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"6px"):mxClient.IS_FF&&(A.style.paddingTop="0px",A.style.marginTop="-2px");if(null!=n)for(M=0;M<n.length;M++)mxUtils.br(A),mxUtils.write(A,n[M]);if(null!=g&&null==b[g]){H.style.visibility="hidden";mxUtils.setOpacity(A,10);var L=new Spinner({lines:12,length:12,width:5,radius:10,rotate:0,color:Editor.isDarkMode()?"#c0c0c0":"#000",speed:1.5,trail:60,shadow:!1,hwaccel:!1,top:"40%",zIndex:2E9});L.spin(v);var F=window.setTimeout(function(){null==b[g]&&(L.stop(),v.style.display="none")},3E4);b.addListener("clientLoaded",
mxUtils.bind(this,function(S,p){null!=b[g]&&p.getProperty("client")==b[g]&&(window.clearTimeout(F),mxUtils.setOpacity(A,100),H.style.visibility="",L.stop(),u(),"drive"==g&&null!=D.parentNode&&D.parentNode.removeChild(D))}))}else u();E.appendChild(v)}f=null!=f?f:2;var k=document.createElement("div");k.style.textAlign="center";k.style.whiteSpace="nowrap";k.style.paddingTop="0px";k.style.paddingBottom="20px";var l=document.createElement("div");l.style.border="1px solid #d3d3d3";l.style.borderWidth="1px 0px 1px 0px";