Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null,null,function(Q){console.log(Q)},600,null,null,null,null,null,J):(x(G,void 0),l(G))}function u(Q){function V(X){R.style.background="transparent";R.innerText="";var Y=document.createElement("div");Y.className="odPreviewStatus";mxUtils.write(Y,X);R.appendChild(Y);q.stop()}if(null!=R)if(R.style.background="transparent",R.innerText="",null==Q||Q.folder||/\.drawiolib$/.test(Q.name))V(mxResources.get("noPreview"));else try{null!=Q.remoteItem&&(Q=Q.remoteItem),m=Q,q.spin(R),n(Q,function(X){q.stop();
if(m==Q)if("mxlibrary"==X.documentElement.nodeName)V(mxResources.get("noPreview"));else{var Y=X.getElementsByTagName("diagram");J=AspectDialog.prototype.createViewer(R,0==Y.length?X.documentElement:Y[0],null,"transparent")}},function(){G=null;V(mxResources.get("notADiagramFile"))})}catch(X){G=null,V(mxResources.get("notADiagramFile"))}}function v(){var Q=g(".odFilesBreadcrumb");if(null!=Q){Q.innerText="";for(var V=0;V<N.length-1;V++){var X=document.createElement("span");X.className="odBCFolder";X.innerHTML=