Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"#ffffff";p.panningHandler.ignoreCell=!0;p.panningHandler.useLeftButtonForPanning=!0;p.minFitScale=null;p.maxFitScale=null;p.centerZoom=!0;var t=mxUtils.parseXml(m),x=b.editor.extractGraphModel(t.documentElement,!0),C=0,I=null,B=p.getGlobalVariable;p.getGlobalVariable=function(l){return"page"==l&&null!=I&&null!=I[C]?I[C].getAttribute("name"):"pagenumber"==l?C+1:"pagecount"==l?null!=I?I.length:1:B.apply(this,arguments)};p.getLinkForCell=function(){return null};m=b.createToolbarButton(Editor.zoomInImage,