Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(d,f,k,v,z,A,H,J,O,G,ja,fa,ca){d=this.downloadRequestBuilder(d,f,k,v,z,A,H,J,O,G,ja,fa,ca);f="";for(var ia in d)k=d[ia],null!=k&&(f+=ia+"="+encodeURIComponent(k)+"&");return new mxXmlRequest(EXPORT_URL,f)};EditorUi.prototype.downloadRequestBuilder=function(d,f,k,v,z,A,H,J,O,G,ja,fa,ca){var ia=this.editor.graph,ma=ia.getGraphBounds();k=this.getFileData(!0,null,null,null,k,0==A?!1:"xmlpng"!=f,null,null,null,!Editor.defaultCompressed,"pdf"==f);var ba=null,S=null,da=null;if(ma.width*ma.height>