g&&g(q)})):m("")};EditorUi.prototype.updateDiagram=function(c){function e(J){var E=new mxCellOverlay(J.image||m.warningImage,J.tooltip,J.align,J.valign,J.offset);E.addListener(mxEvent.CLICK,function(H,S){k.alert(J.tooltip)});return E}var g=null,k=this;if(null!=c&&0<c.length&&(g=mxUtils.parseXml(c),c=null!=g?g.documentElement:null,null!=c&&"updates"==c.nodeName)){var m=this.editor.graph,q=m.getModel();q.beginUpdate();var v=null;try{for(c=c.firstChild;null!=c;){if("update"==c.nodeName){var x=q.getCell(c.getAttribute("id"));
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.