"...");mxEvent.addListener(K,"click",function(J){function E(){c(H,S,function(U){g(S);b.addComment(U,function(Q){U.id=Q;F.push(U);m(S)},function(Q){k(S);E();b.handleError(Q,null,null,null,mxUtils.htmlEntities(mxResources.get("objectNotFound")))})},!0)}var H=b.newComment("",b.getCurrentUser()),S=q(H,F,null,0);E();J.preventDefault();mxEvent.consume(J)});y.appendChild(K)}K=L.cloneNode();K.innerHTML='<img src="'+IMAGE_PATH+'/check.png" style="width: 16px; padding: 2px;">';K.setAttribute("title",mxResources.get("showResolved"));
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.