Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
m?m.getElementsByTagName("parsererror"):null;null!=m&&0<m.length&&(K=B||mxResources.get("invalidChars"),B=m[0].getElementsByTagName("div"),0<B.length&&(K=mxUtils.getTextContent(B[0])));return null!=K?mxUtils.trim(K):K};Editor.addRetryToError=function(m,B){null!=m&&(m=null!=m.error?m.error:m,null==m.retry&&(m.retry=B))};Editor.mermaidToDrawio=function(m,B,K){if("function"===typeof mxMermaidToDrawio)return mxMermaidToDrawio(m,B,K)};Editor.configure=function(m){if(null!=m){Editor.config=m;Editor.configVersion=