Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
DrawioFile.prototype.sendErrorReport=function(b,f,m,d){try{var u=this.compressReportData(this.getAnonymizedXmlForPages(this.getShadowPages()),25E3),v=this.compressReportData(this.getAnonymizedXmlForPages(this.ui.pages),25E3),D=this.getCurrentUser(),F=null!=D?this.ui.hashValue(D.id):"unknown",K=null!=this.sync?"-client_"+this.sync.clientId:"-nosync",M=this.getTitle(),G=M.lastIndexOf(".");D="xml";0<G&&(D=M.substring(G));var S=null!=m?m.stack:Error().stack;EditorUi.sendReport(b+" "+(new Date).toISOString()+
":\n\nAppVersion="+navigator.appVersion+"\nFile="+this.ui.hashValue(this.getId())+" ("+this.getMode()+")"+(this.isModified()?" modified":"")+"\nSize/Type="+this.getSize()+" ("+D+")\nUser="+F+K+"\nPrefix="+this.ui.editor.graph.model.prefix+"\nSync="+DrawioFile.SYNC+(null!=this.sync?(this.sync.enabled?" enabled":"")+(this.sync.isConnected()?" connected":""):"")+"\nPlugins="+(null!=mxSettings.settings?mxSettings.getPlugins():"null")+"\n\nStats:\n"+JSON.stringify(this.stats,null,2)+(null!=f?"\n\n"+f:
"")+(null!=m?"\n\nError: "+m.message:"")+"\n\nStack:\n"+S+"\n\nShadow:\n"+u+"\n\nData:\n"+v,d)}catch(J){}};