Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
x.parentNode.removeChild(x)}catch(I){}}else this.createEchoRequest(c,e,k,q,p).simulate(document,"_blank")}};EditorUi.prototype.createEchoRequest=function(c,e,k,q,p,t){c="xml="+encodeURIComponent(c);return new mxXmlRequest(SAVE_URL,c+(null!=k?"&mime="+k:"")+(null!=p?"&format="+p:"")+(null!=t?"&base64="+t:"")+(null!=e?"&filename="+encodeURIComponent(e):"")+(q?"&binary=1":""))};EditorUi.prototype.base64ToBlob=function(c,e){e=e||"";c=atob(c);for(var k=c.length,q=Math.ceil(k/1024),p=Array(q),t=0;t<q;++t){for(var x=
1024*t,C=Math.min(x+1024,k),I=Array(C-x),B=0;x<C;++B,++x)I[B]=c[x].charCodeAt(0);p[t]=new Uint8Array(I)}return new Blob(p,{type:e})};EditorUi.prototype.saveLocalFile=function(c,e,k,q,p,t,x,C){t=null!=t?t:!1;x=null!=x?x:"vsdx"!=p&&(!mxClient.IS_IOS||!navigator.standalone);p=this.getServiceCount(t);isLocalStorage&&p++;var I=4>=p?2:6<p?4:3;e=new CreateDialog(this,e,mxUtils.bind(this,function(B,T){try{if("_blank"==T)if(null!=k&&"image/"==k.substring(0,6))this.openInNewWindow(c,k,q);else if(null!=k&&"text/html"==