Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f.getHash(),action:"from_"+A.id+"."+A.headRevisionId+"-to_"+f.desc.id+"."+f.desc.headRevisionId,label:null!=this.user?"user_"+this.user.id:"nouser"+(null!=f.sync?"-client_"+f.sync.clientId:"nosync")})}catch(N){}}}catch(N){d(N)}}),G=mxUtils.bind(this,function(O,N){f.saveLevel=4;try{null!=D&&(L.properties=D);var T=E||f.constructor!=DriveFile||"manual"!=DrawioFile.SYNC&&"auto"!=DrawioFile.SYNC?null:f.getCurrentEtag(),m=mxUtils.bind(this,function(R){f.saveLevel=5;try{var U=f.desc.mimeType!=this.xmlMimeType&&