Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
ma=la;da=na;ba=ka;ea=aa;za=pa;Ba=ua;Ca=ha;ea.style.backgroundColor=y;ea.style.border=E}function T(aa,la,na,pa,ha,ka,ua,wa,Ma,Ia,Aa){function Ja(Oa,Ya){null==Ha?(La=Oa,La=/^https?:\/\//.test(La)&&!b.editor.isCorsEnabledForUrl(La)?PROXY_URL+"?url="+encodeURIComponent(La):TEMPLATE_PATH+"/"+La,mxUtils.get(La,mxUtils.bind(this,function(Wa){200<=Wa.getStatus()&&299>=Wa.getStatus()&&(Ha=Wa.getText());Ya(Ha,La)}))):Ya(Ha,La)}function Na(Oa,Ya){if(null==aa||A||b.sidebar.currentElt==ra)b.sidebar.hideTooltip();
else if(b.sidebar.hideTooltip(),null!=M){var Wa="<mxfile><diagram>"+Graph.compress('<mxGraphModel><root><mxCell id="0"/><mxCell id="1" parent="0"/><mxCell id="2" value="" style="shape=image;image='+M.src+';imageAspect=1;" parent="1" vertex="1"><mxGeometry width="'+M.naturalWidth+'" height="'+M.naturalHeight+'" as="geometry" /></mxCell></root></mxGraphModel>')+"</diagram></mxfile>";B(Wa,mxEvent.getClientX(Oa),mxEvent.getClientY(Oa),na,aa)}else b.sidebar.currentElt=ra,A=!0,Ja(aa,function(ab){A&&b.sidebar.currentElt==
ra&&B(ab,mxEvent.getClientX(Oa),mxEvent.getClientY(Oa),ra,Ya);A=!1})}var ra=document.createElement("div");ra.className="geTemplate geAdaptiveAsset";ra.style.position="relative";ra.style.height=Ka+"px";ra.style.width=oa+"px";ra.style.border="1px solid transparent";var Ha=null,La=aa;null!=na?ra.setAttribute("title",mxResources.get(na,null,na)):null!=pa&&0<pa.length&&ra.setAttribute("title",pa);if(null!=ka){ra.style.display="inline-flex";ra.style.justifyContent="center";ra.style.alignItems="center";