Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!0,"1"==urlParams.dev?mxscript("js/orgchart/bridge.min.js",function(){mxscript("js/orgchart/bridge.collections.min.js",function(){mxscript("js/orgchart/OrgChart.Layout.min.js",function(){mxscript("js/orgchart/mxOrgChartLayout.js",k,null,null,null,q)},null,null,null,q)},null,null,null,q)},null,null,null,q):mxscript(DRAWIO_BASE_URL+"/js/orgchart.min.js",k,null,null,null,q))}),onerror)};EditorUi.prototype.importCsv=function(c,e){this.loadOrgChartLayouts(mxUtils.bind(this,function(){this.doImportCsv(c,
e)}))};EditorUi.prototype.doImportCsv=function(c,e){try{var k=c.split("\n"),q=[],p=[],t=[],x={};if(0<k.length){var C={},I=this.editor.graph,B=null,T=null,l=null,n=null,z=null,E=null,A=null,N="whiteSpace=wrap;html=1;",Q=null,L=null,U="",g="auto",y="auto",H=!1,O=null,P=null,V=40,R=40,W=100,X=0,Z=mxUtils.bind(this,function(){null!=e?e(Ua):(I.setSelectionCells(Ua),I.scrollCellToVisible(I.getSelectionCell()));null!=this.chromelessResize&&window.setTimeout(mxUtils.bind(this,function(){this.chromelessResize(!0)}),