Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.editor.setStatus(""),c?e.reloadFile(mxUtils.bind(this,function(){e.handleFileSuccess("manual"==DrawioFile.SYNC)}),mxUtils.bind(this,function(k){e.handleFileError(k,!0)})):e.synchronizeFile(mxUtils.bind(this,function(){e.handleFileSuccess("manual"==DrawioFile.SYNC)}),mxUtils.bind(this,function(k){e.handleFileError(k,!0)}))))};EditorUi.prototype.getFileData=function(c,e,k,q,p,t,x,C,I,B,T){p=null!=p?p:!0;t=null!=t?t:!1;B=null!=B?B:!Editor.defaultCompressed;var l=this.editor.graph;if(e||!c&&null!=
I&&/(\.svg)$/i.test(I.getTitle())){var n=null!=l.themes&&"darkTheme"==l.defaultThemeName;if(n||null!=this.pages&&this.currentPage!=this.pages[0]){var z=l.getGlobalVariable;l=this.createTemporaryGraph(n?l.getDefaultStylesheet():l.getStylesheet());l.setBackgroundImage=this.editor.graph.setBackgroundImage;l.background=this.editor.graph.background;var E=null!=this.pages?this.pages[0]:null;null==E||this.currentPage==E?l.setBackgroundImage(this.editor.graph.backgroundImage):null!=E.viewState&&null!=E.viewState&&
l.setBackgroundImage(E.viewState.backgroundImage);l.getGlobalVariable=function(A){return"page"==A&&null!=E?E.getName():"pagenumber"==A?1:z.apply(this,arguments)};document.body.appendChild(l.container);null!=E&&l.model.setRoot(E.root)}}x=null!=x?x:this.getXmlFileData(p,t,B,T);I=null!=I?I:this.getCurrentFile();c=this.createFileData(x,l,I,window.location.href,c,e,k,q,p,C,B);l!=this.editor.graph&&l.container.parentNode.removeChild(l.container);return c};EditorUi.prototype.getHtml=function(c,e,k,q,p,t){t=