GraphViewer.prototype.updateTitle = function(title)
{
	title = title || '';
	
	if (this.showTitleAsTooltip && this.graph != null && this.graph.container != null)
	{
		this.graph.container.setAttribute('title', title);
    }
	
	if (this.filename != null)
	{
		this.filename.innerHTML = '';
		mxUtils.write(this.filename, title);
		this.filename.setAttribute('title', title);
	}
};
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.