Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
ha[X]),Q.appendChild(R);P.appendChild(Q);z(H,K,P)}var J=this,O=new mxVsdxCanvas2D,M={},L=1;this.exportCurrentDiagrams=function(H){try{if(h.spinner.spin(document.body,mxResources.get("exporting"))){var K=function(Fa,ka){Fa=Fa.model.getChildCells(Fa.model.root);R[ka]=[];for(var Za=0;Za<Fa.length;Za++)Fa[Za].visible&&R[ka].push({name:Fa[Za].value||"Background",visible:Fa[Za].visible,locked:Fa[Za].style&&0<=Fa[Za].style.indexOf("locked=1")})},P=new JSZip;O.init(P);M={};L=1;var Q={},R={},ha={},X=null!=