Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
typeof window.mxUtilsBinaryToArray){Y=mxUtilsBinaryToArray(Y.request.responseBody).toArray();ea=Array(Y.length);for(var fa=0;fa<Y.length;fa++)ea[fa]=String.fromCharCode(Y[fa]);ea=ea.join("")}V=null!=V?V:"data:image/png;base64,";ea=V+Editor.base64Encode(ea)}y(ea)}}else null!=H&&(0==Y.getStatus()?H({message:mxResources.get("accessDenied")},Y):404==Y.getStatus()?H({code:Y.getStatus()},Y):H({message:mxResources.get("error")+" "+Y.getStatus()},Y))}),function(Y){null!=H&&H({message:mxResources.get("error")+