Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
return O};Editor.getDiagramNodeXml=function(g){var y=mxUtils.getTextContent(g),H=null;0<y.length?H=Graph.decompress(y):null!=g.firstChild&&(H=mxUtils.getXml(g.firstChild));return H};Editor.extractGraphModelFromPdf=function(g){g=g.substring(g.indexOf(",")+1);g=window.atob&&!mxClient.IS_SF?atob(g):Base64.decode(g,!0);if("%PDF-1.7"==g.substring(0,8)){var y=g.indexOf("EmbeddedFile");if(-1<y){var H=g.indexOf("stream",y)+9;if(0<g.substring(y,H).indexOf("application#2Fvnd.jgraph.mxfile"))return y=g.indexOf("endstream",
H-1),pako.inflateRaw(Graph.stringToArrayBuffer(g.substring(H,y)),{to:"string"})}return null}H=null;y="";for(var O=0,P=0,V=[],R=null;P<g.length;){var W=g.charCodeAt(P);P+=1;10!=W&&(y+=String.fromCharCode(W));W=="/Subject (%3Cmxfile".charCodeAt(O)?O++:O=0;if(19==O){var X=g.indexOf("%3C%2Fmxfile%3E)",P)+15;P-=9;if(X>P){H=g.substring(P,X);break}}10==W&&("endobj"==y?R=null:"obj"==y.substring(y.length-3,y.length)||"xref"==y||"trailer"==y?(R=[],V[y.split(" ")[0]]=R):null!=R&&R.push(y),y="")}null==H&&(H=
Editor.extractGraphModelFromXref(V));null!=H&&(H=decodeURIComponent(H.replace(/\\\(/g,"(").replace(/\\\)/g,")")));return H};Editor.extractGraphModelFromXref=function(g){var y=g.trailer,H=null;null!=y&&(y=/.* \/Info (\d+) (\d+) R/g.exec(y.join("\n")),null!=y&&0<y.length&&(y=g[y[1]],null!=y&&(y=/.* \/Subject (\d+) (\d+) R/g.exec(y.join("\n")),null!=y&&0<y.length&&(g=g[y[1]],null!=g&&(g=g.join("\n"),H=g.substring(1,g.length-1))))));return H};Editor.extractParserError=function(g,y){var H=null;g=null!=