Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){c.setAndPersistLanguage(P);c.alert(mxResources.get("restartForChangeRequired"))}),y),(P==mxLanguage||""==P&&null==mxLanguage)&&l.addCheckmark(z,Editor.checkmarkImage));return z});J("");l.addSeparator(y);for(var G in mxLanguageMap)J(G)})));var F=Menus.prototype.createMenubar;Menus.prototype.createMenubar=function(l){var y=F.apply(this,arguments);if(("1"!=urlParams.embed||"1"==urlParams.atlas)&&null!=y&&Editor.enableSimpleTheme&&"atlassian"!=c.getServiceName()){var J=this.get("dynamicAppearance");
if(null!=J){var G=y.addMenu("",J.funct);G.setAttribute("title",mxResources.get("appearance"));G.className="geToolbarButton geAdaptiveAsset";G.style.backgroundPosition="center center";G.style.backgroundRepeat="no-repeat";G.style.backgroundSize="100% 100%";G.style.display="inline-block";G.style.cursor="pointer";G.style.zIndex="1";G.style.position="absolute";G.style.height="18px";G.style.width="18px";"atlas"==Editor.currentTheme?(G.style.filter="invert(100%)",G.style.right="11px",G.style.top="10px"):
(G.style.right="10px",G.style.top="5px");document.body.appendChild(G);y.langIcon=G;J=mxUtils.bind(this,function(){var P=window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth;G.style.display="atlas"==Editor.currentTheme||"min"==Editor.currentTheme||"sketch"==Editor.currentTheme?"none":"";G.style.backgroundImage="simple"==Editor.currentTheme?750>P?"url("+Editor.thinDoubleArrowRightImage+")":"url("+(Editor.isDarkMode()||Editor.cssDarkMode?Editor.thinDarkImage:Editor.thinLightImage)+
")":"url("+(Editor.isDarkMode()?Editor.darkModeImage:Editor.lightModeImage)+")"});this.editorUi.addListener("currentThemeChanged",J);this.editorUi.addListener("darkModeChanged",J);mxEvent.addListener(window,"resize",J);J()}}return y}}c.customLayoutConfig=[{layout:"mxHierarchicalLayout",config:{orientation:"west",intraCellSpacing:30,interRankCellSpacing:100,interHierarchySpacing:60,parallelEdgeSpacing:10}}];c.actions.addAction("runLayout",function(){c.showCustomLayoutDialog(JSON.stringify(c.customLayoutConfig,