Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
q.value;q.parentNode.removeChild(q);C.parentNode.removeChild(C)}catch(J){b.handleError(J)}v.innerHTML='<div style="padding-top:10px;text-align:center;"><img src="'+IMAGE_PATH+'/spin.gif" valign="middle"> '+mxUtils.htmlEntities(mxResources.get("loading"))+"...</div>";g=b.canReplyToReplies();b.commentsSupported()?b.getComments(function(J){function G(P){if(null!=P){P.sort(function(N,T){return new Date(N.modifiedDate)-new Date(T.modifiedDate)});for(var O=0;O<P.length;O++)G(P[O].replies)}}J.sort(function(P,