Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"6px"):mxClient.IS_FF&&(x.style.paddingTop="0px",x.style.marginTop="-2px");if(null!=g)for(R=0;R<g.length;R++)mxUtils.br(x),mxUtils.write(x,g[R]);if(null!=e&&null==b[e]){B.style.visibility="hidden";mxUtils.setOpacity(x,10);var I=new Spinner({lines:12,length:12,width:5,radius:10,rotate:0,color:Editor.isDarkMode()?"#c0c0c0":"#000",speed:1.5,trail:60,shadow:!1,hwaccel:!1,top:"40%",zIndex:2E9});I.spin(t);var A=window.setTimeout(function(){null==b[e]&&(I.stop(),t.style.display="none")},3E4);b.addListener("clientLoaded",
mxUtils.bind(this,function(S,l){null!=b[e]&&l.getProperty("client")==b[e]&&(window.clearTimeout(A),mxUtils.setOpacity(x,100),B.style.visibility="",I.stop(),p(),"drive"==e&&null!=N.parentNode&&N.parentNode.removeChild(N))}))}else p();L.appendChild(t)}m=null!=m?m:2;var u=document.createElement("div");u.style.textAlign="center";u.style.whiteSpace="nowrap";u.style.paddingTop="0px";u.style.paddingBottom="20px";var v=document.createElement("div");v.style.border="1px solid #d3d3d3";v.style.borderWidth="1px 0px 1px 0px";