Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
L.send(I)}):(A++,C()):function(H,I){var L=H.length-I.length;H=H.indexOf(I,L);return-1!==H&&H===L}(R,".bmp")?JSZip.support.uint8array&&K.async("uint8array").then(function(H){H=new BmpDecoder(H);var I=document.createElement("canvas");I.width=H.width;I.height=H.height;I.getContext("2d").putImageData(H.imageData,0,0);H=I.toDataURL("image/jpeg");p[P]=H.substr(23);A++;C()}):K.async("base64").then(function(H){p[P]=H;A++;C()}))})},function(J){null!=d&&d(J)})};m.prototype.createMxGraph=function(){var c=new Graph;
c.setExtendParents(!1);c.setExtendParentsOnAdd(!1);c.setConstrainChildren(!1);c.setHtmlLabels(!0);c.getModel().maintainEdgeParent=!1;return c};m.prototype.processPage=function(c,a){c=(new mxCodec).encode(c.getModel());c.setAttribute("style","default-style2");c=mxUtils.getXml(c);var b="";if(null!=a){var d=mxUtils.htmlEntities(a.getPageName())+(a.isBackground()?" (Background)":"");a=mxUtils.htmlEntities(a.getPageNameU());b+='<diagram name="'+d+'" id="'+a.replace(/\s/g,"_")+'">'}return b+=Graph.compress(c)};