Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
A){return new mxXmlRequest(EXPORT_URL,"format="+k+"&base64="+(A||"0")+(null!=E?"&filename="+encodeURIComponent(E):"")+"&extras="+encodeURIComponent(JSON.stringify(z))+(0<x?"&dpi="+x:"")+"&bg="+(null!=q?q:"none")+"&w="+l+"&h="+n+"&border="+t+"&xml="+encodeURIComponent(B))})}else"png"==k?c.exportImage(p,null==q||"none"==q,!0,!1,!1,t,!0,!1,null,C,x):c.exportImage(p,!1,!0,!1,!1,t,!0,!1,"jpeg",C);else mxUtils.alert(mxResources.get("drawingTooLarge"))}});EditorUi.prototype.getDiagramTextContent=function(){this.editor.graph.setEnabled(!1);
var c=this.editor.graph,e="";if(null!=this.pages)for(var k=0;k<this.pages.length;k++){var q=c;this.currentPage!=this.pages[k]&&(q=this.createTemporaryGraph(c.getStylesheet()),this.updatePageRoot(this.pages[k]),q.model.setRoot(this.pages[k].root));e+=this.pages[k].getName()+" "+q.getIndexableText()+" "}else e=c.getIndexableText();this.editor.graph.setEnabled(!0);return e};EditorUi.prototype.showRemotelyStoredLibrary=function(c){var e={},k=document.createElement("div");k.style.whiteSpace="nowrap";var q=