Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
B=new mxAsyncCanvas(this.thumbImageCache);I.images=this.thumbImageCache.images;var T=new mxImageExport;T.drawShape=function(l,n){l.shape instanceof mxShape&&l.shape.checkBounds()&&(n.save(),n.translate(.5,.5),l.shape.paint(n),n.translate(-.5,-.5),n.restore())};T.drawText=function(l,n){};T.drawState(D.getView().getState(D.model.root),B);B.finish(mxUtils.bind(this,function(){try{T.drawState(D.getView().getState(D.model.root),I),D!=this.editor.graph&&null!=D.container.parentNode&&D.container.parentNode.removeChild(D.container)}catch(l){S=