Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!1,!1),d.pdfPageExport||mxEvent.addListener(O,"change",E);E=!mxClient.IS_CHROMEAPP&&!EditorUi.isElectronApp&&"draw.io"==d.getServiceName();var R=null,W=null;if(EditorUi.isElectronApp||E)W=d.addCheckbox(n,mxResources.get("includeCopyOfMyDiagram"),Editor.defaultIncludeDiagram),z+=30;E&&(R=d.addCheckbox(n,mxResources.get("transparentBackground"),!1),z+=30);n=new CustomDialog(d,n,mxUtils.bind(this,function(){var X=null;if(!l){X=parseInt(g.value);var Z=parseInt(H.value);X=L.checked||X==N&&Z==N?null:{from:Math.max(0,
Math.min(A-1,X-1)),to:Math.max(0,Math.min(A-1,Z-1))}}d.downloadFile("pdf",null,null,!O.checked,l?!0:!L.checked&&null==X,!P.checked,null!=R&&R.checked,null,null,V.checked,null!=W&&W.checked,X)}),null,mxResources.get("export"));d.showDialog(n.container,300,z,!0,!0)}else d.showDialog((new PrintDialog(d,mxResources.get("formatPdf"))).container,360,null!=d.pages&&1<d.pages.length&&(d.editor.editable||"1"!=urlParams["hide-pages"])?470:390,!0,!0)}));d.actions.addAction("open...",function(){d.pickFile()});