Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
".scratchpad"==d.title&&(this.scratchpad=null))};EditorUi.prototype.removeLibrarySidebar=function(d){var f=this.sidebar.palettes[d];if(null!=f){for(var k=0;k<f.length;k++)f[k].parentNode.removeChild(f[k]);delete this.sidebar.palettes[d]}};EditorUi.prototype.repositionLibrary=function(d){var f=this.sidebar.getEntryContainer();if(null==d){var k=this.sidebar.palettes["L.scratchpad"];null==k&&(k=this.sidebar.palettes.search);null!=k&&(d=k[k.length-1].nextSibling)}d=null!=d?d:f.firstChild.nextSibling.nextSibling;
k=f.lastChild;var v=k.previousSibling;f.insertBefore(k,d);f.insertBefore(v,k)};EditorUi.prototype.loadLibrary=function(d,f){var k=mxUtils.parseXml(d.getData());if("mxlibrary"==k.documentElement.nodeName){var v=JSON.parse(mxUtils.getTextContent(k.documentElement));this.libraryLoaded(d,v,k.documentElement.getAttribute("title"),f)}else throw{message:mxResources.get("notALibraryFile")};};EditorUi.prototype.getLibraryStorageHint=function(d){return""};EditorUi.prototype.libraryLoaded=function(d,f,k,v){if(null!=