Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
e.file.fireEvent(new mxEventObject("realtimeStateChanged"))}));e.file.fireEvent(new mxEventObject("realtimeStateChanged"))}catch(B){P=B,e.file.fireEvent(new mxEventObject("realtimeStateChanged"))}};this.destroy=function(){if(!q){EditorUi.debug("P2PCollab: destroyed");q=!0;for(sessionId in g)D(sessionId);null!=this.mouseListeners&&z.removeMouseListener(this.mouseListeners);null!=this.selectionChangeListener&&z.getSelectionModel().removeListener(this.selectionChangeListener);null!=this.shareCursorPositionListener&&
b.removeListener(this.shareCursorPositionListener);null!=this.cursorHandler&&(mxEvent.removeListener(z.container,"scroll",this.cursorHandler),z.getView().removeListener(mxEvent.SCALE,this.cursorHandler),z.getView().removeListener(mxEvent.TRANSLATE,this.cursorHandler),z.getView().removeListener(mxEvent.SCALE_AND_TRANSLATE,this.cursorHandler),b.editor.removeListener("pageSelected",this.cursorHandler),b.removeListener(this.cursorHandler));null!=I&&1<=I.readyState&&(I.close(1E3),I=null);for(var N in F)null!=
F[N]&&F[N].destroy();e.file.fireEvent(new mxEventObject("realtimeStateChanged"))}}};