Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.editor.getOrCreateFilename=function(){var U=d.defaultFilename,Q=d.getCurrentFile();null!=Q&&(U=null!=Q.getTitle()?Q.getTitle():U);return U};var ma=this.actions.get("print");ma.setEnabled(!mxClient.IS_IOS||!navigator.standalone);ma.visible=ma.isEnabled();if(!this.editor.chromeless||this.editor.editable)this.keyHandler.bindAction(70,!0,"findReplace"),this.keyHandler.bindAction(77,!0,"editGeometry",!0),this.keyHandler.bindAction(75,!0,"tags"),this.keyHandler.bindAction(65,!1,"insertText"),this.keyHandler.bindAction(83,