Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.handleError({message:mxResources.get("error")+" "+C.getStatus()}))}),mxUtils.bind(this,function(C){this.handleError(C)}))}),p=mxUtils.bind(this,function(){window.clearTimeout(F);F=window.setTimeout(S,L)});this.editor.addListener("pageSelected",mxUtils.bind(this,function(){p();S()}));p();S()}null!=g&&g()});if(null!=d.url&&0<d.url.length){var v=this.editor.getProxiedUrl(d.url);this.editor.loadUrl(v,mxUtils.bind(this,function(A){u(A)}),mxUtils.bind(this,function(A){null!=n&&n(A)}))}else u("")};