Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.window.setClosable(!0);this.window.addListener("show",mxUtils.bind(this,function(){E.refresh();this.window.fit()}));b.installResizeHandler(this,!0)},AuthDialog=function(b,f,m,d){var u=document.createElement("div");u.style.textAlign="center";var v=document.createElement("p");v.style.fontSize="16pt";v.style.padding="0px";v.style.margin="0px";v.style.color="gray";mxUtils.write(v,mxResources.get("authorizationRequired"));var E="Unknown",F=document.createElement("img");F.setAttribute("border","0");
F.setAttribute("align","absmiddle");F.style.marginRight="10px";f==b.drive?(E=mxResources.get("googleDrive"),F.src=IMAGE_PATH+"/google-drive-logo-white.svg"):f==b.dropbox?(E=mxResources.get("dropbox"),F.src=IMAGE_PATH+"/dropbox-logo-white.svg"):f==b.oneDrive?(E=mxResources.get("oneDrive"),F.src=IMAGE_PATH+"/onedrive-logo-white.svg"):f==b.gitHub?(E=mxResources.get("github"),F.src=IMAGE_PATH+"/github-logo-white.svg"):f==b.gitLab?(E=mxResources.get("gitlab"),F.src=IMAGE_PATH+"/gitlab-logo.svg",F.style.width=
"32px"):f==b.trello&&(E=mxResources.get("trello"),F.src=IMAGE_PATH+"/trello-logo-white.svg");b=document.createElement("p");mxUtils.write(b,mxResources.get("authorizeThisAppIn",[E]));var L=document.createElement("input");L.setAttribute("type","checkbox");E=mxUtils.button(mxResources.get("authorize"),function(){d(L.checked)});E.insertBefore(F,E.firstChild);E.style.marginTop="6px";E.className="geBigButton";E.style.fontSize="18px";E.style.padding="14px";u.appendChild(v);u.appendChild(b);u.appendChild(E);
m&&(m=document.createElement("p"),m.style.marginTop="20px",m.appendChild(L),v=document.createElement("span"),mxUtils.write(v," "+mxResources.get("rememberMe")),m.appendChild(v),u.appendChild(m),L.checked=!0,L.defaultChecked=!0,mxEvent.addListener(v,"click",function(N){L.checked=!L.checked;mxEvent.consume(N)}));this.container=u},MoreShapesDialog=function(b,f,m){m=null!=m?m:b.sidebar.entries;var d=document.createElement("div"),u=[];if(null!=b.sidebar.customEntries)for(var v=0;v<b.sidebar.customEntries.length;v++){for(var E=