k&&k(q)})):p("")};EditorUi.prototype.updateDiagram=function(d){function g(K){var F=new mxCellOverlay(K.image||p.warningImage,K.tooltip,K.align,K.valign,K.offset);F.addListener(mxEvent.CLICK,function(H,S){l.alert(K.tooltip)});return F}var k=null,l=this;if(null!=d&&0<d.length&&(k=mxUtils.parseXml(d),d=null!=k?k.documentElement:null,null!=d&&"updates"==d.nodeName)){var p=this.editor.graph,q=p.getModel();q.beginUpdate();var x=null;try{for(d=d.firstChild;null!=d;){if("update"==d.nodeName){var y=q.getCell(d.getAttribute("id"));
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.