Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
G&&"function"===typeof G.substring&&(new XMLHttpRequest).upload&&this.isRemoteFileFormat(G,"")?this.isOffline()?this.showError(mxResources.get("error"),mxResources.get("notInOffline")):this.parseFileData(G,mxUtils.bind(this,function(ca){4==ca.readyState&&(200<=ca.status&&299>=ca.status&&"<mxGraphModel"==ca.responseText.substring(0,13)?Ca(ca.responseText,L):this.handleError({message:413==ca.status?mxResources.get("diagramTooLarge"):mxResources.get("unknownError")}))}),""):null!=G&&"function"===typeof G.substring&&
this.isLucidChartData(G)?this.convertLucidChart(G,mxUtils.bind(this,function(ca){Ca(ca)}),mxUtils.bind(this,function(ca){this.handleError(ca)})):null==G||"object"!==typeof G||null==G.format||null==G.data&&null==G.url?(G=p(G),Ca(G,L)):this.loadDescriptor(G,mxUtils.bind(this,function(ca){Ca(Ba(),L)}),mxUtils.bind(this,function(ca){this.handleError(ca,mxResources.get("errorLoadingFile"))}))}}));var B=window.opener||window.parent;v="json"==urlParams.proto?JSON.stringify({event:"init"}):urlParams.ready||