Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
z&&0<z.length)return!0;d.showError(mxResources.get("error"),mxResources.get("invalidName"),mxResources.get("ok"));return!1},null,null,null,null,d.editor.fileExtensions);this.editorUi.showDialog(n.container,340,96,!0,!0);n.init()}}));H.isEnabled=function(){return this.enabled&&v.apply(this,arguments)};H.visible="1"!=urlParams.embed;d.actions.addAction("makeCopy...",mxUtils.bind(this,function(){var l=d.getCurrentFile();if(null!=l){var n=d.getCopyFilename(l);l.constructor==DriveFile?(n=new CreateDialog(d,