Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(J){H.stop();null!=this.exportDialog&&null!=this.exportDialog.parentNode&&(this.exportDialog.parentNode.removeChild(this.exportDialog),this.exportDialog=null);this.handleError(J)}),null,null,null,null,null,null,null,Editor.defaultBorder)}mxEvent.consume(v)}),Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(d,f,k,v,z){this.isLocalFileSave()?this.saveLocalFile(k,d,v,z,f):this.saveRequest(d,f,mxUtils.bind(this,function(A,H){return this.createEchoRequest(k,
A,v,z,f,H)}),k,z,v)};EditorUi.prototype.saveRequest=function(d,f,k,v,z,A,H){H=null!=H?H:!mxClient.IS_IOS||!navigator.standalone;var J=this.getServiceCount(!1);isLocalStorage&&J++;var O=4>=J?2:6<J?4:3;d=new CreateDialog(this,d,mxUtils.bind(this,function(G,ja){if("_blank"==ja||null!=G&&0<G.length){var fa=k("_blank"==ja?null:G,ja==App.MODE_DEVICE||"download"==ja||null==ja||"_blank"==ja?"0":"1");null!=fa&&(ja==App.MODE_DEVICE||"download"==ja||"_blank"==ja?fa.simulate(document,"_blank"):this.pickFolder(ja,