Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
EditorUi.debug("P2PCollab:","sendReply error",arguments,m)}});this.sendMessage=c;this.sendDiff=function(N){this.sendMessage("diff",{diff:N})};this.getState=function(){return null!=I?I.readyState:3};this.getLastError=function(){return P};this.mouseListeners={startX:0,startY:0,scrollLeft:0,scrollTop:0,mouseDown:function(N,T){},mouseMove:function(N,T){var m,B=-1;return function(){clearTimeout(m);var K=this,R=arguments,U=function(){m=null;B=Date.now();N.apply(K,R)};Date.now()-B>T?U():m=setTimeout(U,T)}}(function(N,
T){k(T)},300),mouseUp:function(N,T){k(T)}};z.addMouseListener(this.mouseListeners);this.shareCursorPositionListener=function(){b.isShareCursorPosition()||c("cursor",{hide:!0})};b.addListener("shareCursorPositionChanged",this.shareCursorPositionListener);this.selectionChangeListener=function(N,T){N=function(K){return null!=K?K.id:null};var m=null!=b.currentPage?b.currentPage.getId():null,B=T.getProperty("added");T=T.getProperty("removed");c("selectionChange",{pageId:m,removed:B?B.map(N):[],added:T?