Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"none",c.style.display="none");var q=document.createElement("option"),p=!1,t=!1,x=function(A,N){p||null!=A&&t||(S.checked?null!=N&&N(q.selected?null:c.value):""==J.value||b.isOffline()?(I.value="",B.value="",null!=N&&N("")):(J.value=mxUtils.trim(J.value),b.loadImage(J.value,function(Q){I.value=Q.width;B.value=Q.height;null!=N&&N(J.value)},function(){b.showError(mxResources.get("error"),mxResources.get("fileNotFound"),mxResources.get("ok"));I.value="";B.value="";null!=N&&N(null)})))},C=mxUtils.bind(this,