Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=m&&m();b.openLink(f,null,!0)});F.className="geBtn gePrimaryBtn";F.style.width=E.style.width;v.appendChild(F);mxUtils.br(v);mxUtils.br(v);mxUtils.write(v,mxResources.get("allowPopups"));this.container=v},ImageDialog=function(b,f,m,d,u,v,E,F){function L(){0<R.value.length?t.removeAttribute("disabled"):t.setAttribute("disabled","disabled")}v=null!=v?v:!0;var N=b.editor.graph,H=document.createElement("div");mxUtils.write(H,f);f=document.createElement("div");f.className="geTitle";f.style.backgroundColor=