Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
return S};EditorUi.prototype.getXmlFileData=function(d,g,n,t){d=null!=d?d:!0;g=null!=g?g:!1;n=null!=n?n:!Editor.defaultCompressed;var u=this.editor.getGraphXml(d,t);if(d&&null!=this.fileNode&&null!=this.currentPage)if(d=function(L){var F=L.getElementsByTagName("mxGraphModel");F=0<F.length?F[0]:null;null==F&&n?(F=mxUtils.trim(mxUtils.getTextContent(L)),L=L.cloneNode(!1),0<F.length&&(F=Graph.decompress(F),null!=F&&0<F.length&&L.appendChild(mxUtils.parseXml(F).documentElement))):null==F||n?L=L.cloneNode(!0):
(L=L.cloneNode(!1),mxUtils.setTextContent(L,Graph.compressNode(F)));u.appendChild(L)},EditorUi.removeChildNodes(this.currentPage.node),mxUtils.setTextContent(this.currentPage.node,Graph.compressNode(u)),u=this.fileNode.cloneNode(!1),g)d(this.currentPage.node);else for(g=0;g<this.pages.length;g++){var v=this.pages[g],A=v.node;if(v!=this.currentPage)if(v.needsUpdate){var H=new mxCodec(mxUtils.createXmlDocument());H=H.encode(new mxGraphModel(v.root));this.editor.graph.saveViewState(v.viewState,H,null,