Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){try{null!=this.resolvedFontCss&&this.addFontCss(ca,this.resolvedFontCss),qa.src=Editor.createSvgDataUri(mxUtils.getXml(ca))}catch(Aa){null!=P&&P(Aa)}});this.embedExtFonts(mxUtils.bind(this,function(Aa){try{null!=Aa&&this.addFontCss(ca,Aa),this.loadFonts(ka)}catch(xa){null!=P&&P(xa)}}))}catch(Aa){null!=P&&P(Aa)}}),H,Y)}catch(ca){null!=P&&P(ca)}};Editor.crcTable=[];for(var u=0;256>u;u++)for(var v=u,D=0;8>D;D++)v=1==(v&1)?3988292384^v>>>1:v>>>1,Editor.crcTable[u]=v;Editor.updateCRC=function(g,
y,H,O){for(var P=0;P<O;P++)g=Editor.crcTable[(g^y.charCodeAt(H+P))&255]^g>>>8;return g};Editor.crc32=function(g){for(var y=-1,H=0;H<g.length;H++)y=y>>>8^Editor.crcTable[(y^g.charCodeAt(H))&255];return(y^-1)>>>0};Editor.writeGraphModelToPng=function(g,y,H,O,P){function V(Y,ea){var fa=X;X+=ea;return Y.substring(fa,X)}function R(Y){Y=V(Y,4);return Y.charCodeAt(3)+(Y.charCodeAt(2)<<8)+(Y.charCodeAt(1)<<16)+(Y.charCodeAt(0)<<24)}function W(Y){return String.fromCharCode(Y>>24&255,Y>>16&255,Y>>8&255,Y&255)}