Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0,260,200);this.window.destroyOnClose=!1;this.window.setMaximizable(!1);this.window.setResizable(!0);this.window.setClosable(!0);this.window.setVisible(!0);this.window.addListener(mxEvent.SHOW,mxUtils.bind(this,function(){this.window.fit()}));b.installResizeHandler(this,!0)},ConfirmDialog=function(b,f,m,d,u,v,E,F,L,N,H){var R=document.createElement("div");R.style.textAlign="center";H=null!=H?H:44;var J=document.createElement("div");J.style.padding="6px";J.style.overflow="auto";J.style.maxHeight=H+
"px";J.style.lineHeight="1.2em";mxUtils.write(J,f);R.appendChild(J);null!=N&&(J=document.createElement("div"),J.style.padding="6px 0 6px 0",f=document.createElement("img"),f.setAttribute("src",N),J.appendChild(f),R.appendChild(J));N=document.createElement("div");N.style.textAlign="center";N.style.whiteSpace="nowrap";var c=document.createElement("input");c.setAttribute("type","checkbox");v=mxUtils.button(v||mxResources.get("cancel"),function(){b.hideDialog();null!=d&&d(c.checked)});v.className="geBtn";
null!=F&&(v.innerHTML=F+"<br>"+v.innerHTML,v.style.paddingBottom="8px",v.style.paddingTop="8px",v.style.height="auto",v.style.width="40%");b.editor.cancelFirst&&N.appendChild(v);var e=mxUtils.button(u||mxResources.get("ok"),function(){b.hideDialog();null!=m&&m(c.checked)});N.appendChild(e);null!=E?(e.innerHTML=E+"<br>"+e.innerHTML+"<br>",e.style.paddingBottom="8px",e.style.paddingTop="8px",e.style.height="auto",e.className="geBtn",e.style.width="40%"):e.className="geBtn gePrimaryBtn";b.editor.cancelFirst||
N.appendChild(v);R.appendChild(N);L?(N.style.marginTop="10px",J=document.createElement("p"),J.style.marginTop="20px",J.style.marginBottom="0px",J.appendChild(c),u=document.createElement("span"),mxUtils.write(u," "+mxResources.get("rememberThisSetting")),J.appendChild(u),R.appendChild(J),mxEvent.addListener(u,"click",function(g){c.checked=!c.checked;mxEvent.consume(g)})):N.style.marginTop="12px";this.init=function(){e.focus()};this.container=R},HeadlessEditorUi=function(){EditorUi.call(this,new Editor(!0),