Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!c.isOffline()&&!c.printPdfExport){var p=null==c.pages||1>=c.pages.length,q=document.createElement("div");q.style.whiteSpace="nowrap";var C=document.createElement("h3");mxUtils.write(C,mxResources.get("formatPdf"));C.style.cssText="width:100%;text-align:center;margin-top:0px;margin-bottom:4px";q.appendChild(C);var J=function(){N!=this&&this.checked?(U.removeAttribute("disabled"),U.checked=!k.pageVisible):(U.setAttribute("disabled","disabled"),U.checked=!1)};C=200;var G=1,P=null;if(c.pdfPageExport&&