Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
typeof window.mxUtilsBinaryToArray){Z=mxUtilsBinaryToArray(Z.request.responseBody).toArray();da=Array(Z.length);for(var ba=0;ba<Z.length;ba++)da[ba]=String.fromCharCode(Z[ba]);da=da.join("")}W=null!=W?W:"data:image/png;base64,";da=W+Editor.base64Encode(da)}A(da)}}else null!=M&&(0==Z.getStatus()?M({message:mxResources.get("accessDenied")},Z):404==Z.getStatus()?M({code:Z.getStatus()},Z):M({message:mxResources.get("error")+" "+Z.getStatus()},Z))}),function(Z){null!=M&&M({message:mxResources.get("error")+