Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxResources.get("reconnecting"))?window.location.search=this.getSearch(["url"]):null!=t?this.fileLoaded(t)||v():v()});g?d():this.handleError(H,mxResources.get("errorLoadingFile"),d,!0,null,null,!0)}else v();return u};EditorUi.prototype.getHashValueForPages=function(d,g){var n=0,t=new mxGraphModel,u=new mxCodec;null!=g&&(g.byteCount=0,g.attrCount=0,g.eltCount=0,g.nodeCount=0);for(var v=0;v<d.length;v++){this.updatePageRoot(d[v]);var A=d[v].node.cloneNode(!1);A.removeAttribute("name");t.root=d[v].root;
var H=u.encode(t);this.editor.graph.saveViewState(d[v].viewState,H,!0);H.removeAttribute("pageWidth");H.removeAttribute("pageHeight");A.appendChild(H);null!=g&&(g.eltCount+=A.getElementsByTagName("*").length,g.nodeCount+=A.getElementsByTagName("mxCell").length);n=(n<<5)-n+this.hashValue(A,function(L,F,S,p){return!p||"mxGeometry"!=L.nodeName&&"mxPoint"!=L.nodeName||"x"!=F&&"y"!=F&&"width"!=F&&"height"!=F?p&&"mxCell"==L.nodeName&&"previous"==F?null:S:Math.round(S)},g)<<0}return n};EditorUi.prototype.hashValue=