Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
document.body.clientHeight)-80,800),null!=ja.title?mxResources.get(ja.title,null,ja.title):null,!0,new mxPoint(Ma,Ia),!0,null,!0);var Na=document.createElement("div");Na.className="geTempDlgDialogMask";N.appendChild(Na);var ra=b.sidebar.hideTooltip;b.sidebar.hideTooltip=function(){Na&&(N.removeChild(Na),Na=null,ra.apply(this,arguments),b.sidebar.hideTooltip=ra)};mxEvent.addListener(Na,"click",function(){b.sidebar.hideTooltip()})}}var ka=null;if(oa||b.sidebar.currentElt==aa)b.sidebar.hideTooltip();