Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){fa();ja()}));fa();ja()}null!=f&&f()});if(null!=d.url&&0<d.url.length){var A=this.editor.getProxiedUrl(d.url);this.editor.loadUrl(A,mxUtils.bind(this,function(H){z(H)}),mxUtils.bind(this,function(H){null!=k&&k(H)}))}else z("")};EditorUi.prototype.updateDiagram=function(d){function f(V){var l=new mxCellOverlay(V.image||z.warningImage,V.tooltip,V.align,V.valign,V.offset);l.addListener(mxEvent.CLICK,function(B,N){v.alert(V.tooltip)});return l}var k=null,v=this;if(null!=d&&0<d.length&&(k=mxUtils.parseXml(d),