Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
R,m,A,M){l=mxEvent.isAltDown(n)?l:v.getCenterInsertPoint(new mxRectangle(0,0,A,M));var Q=null;v.getModel().beginUpdate();try{Q="txt"==R?b.insertAsPreText(m,l.x,l.y):v.insertVertex(null,null,null,l.x,l.y,A,M,"shape=image;noLabel=1;verticalAlign=top;aspect=fixed;imageAspect=0;image="+b.convertDataUri(m)+";"),v.setAttributeForCell(Q,"plantUmlData",JSON.stringify({data:K,format:R},null,2))}finally{v.getModel().endUpdate()}null!=Q&&(v.setSelectionCell(Q),v.scrollCellToVisible(Q))},v=b.editor.graph,B="plantUmlTxt"==