Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null;if(null!=P){var l=P.indexOf(",");if(0<l)for(P=P.substring(l+1),V=V.getProperty("patches"),l=0;l<V.length;l++)if(null!=V[l][EditorUi.DIFF_UPDATE]&&null!=V[l][EditorUi.DIFF_UPDATE][P]||null!=V[l][EditorUi.DIFF_REMOVE]&&0<=mxUtils.indexOf(V[l][EditorUi.DIFF_REMOVE],P)){f.refreshBackgroundImage();break}}}));var A=f.getBackgroundImageObject;f.getBackgroundImageObject=function(P,V){var l=A.apply(this,arguments);if(null!=l&&null!=l.originalSrc)if(!V)l={src:l.originalSrc};else if(V&&null!=this.themes&&
"darkTheme"==this.defaultThemeName){var B=this.stylesheet,N=this.shapeForegroundColor,Z=this.shapeBackgroundColor;this.stylesheet=this.getDefaultStylesheet();this.shapeBackgroundColor="#ffffff";this.shapeForegroundColor="#000000";l=d.createImageForPageLink(l.originalSrc);this.shapeBackgroundColor=Z;this.shapeForegroundColor=N;this.stylesheet=B}return l};this.isOffline()||"undefined"===typeof window.EditDataDialog||(EditDataDialog.placeholderHelpLink="https://www.drawio.com/doc/faq/predefined-placeholders");