Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
K.status&&299>=K.status)try{var P=new FileReader;P.readAsDataURL(K.response);P.onloadend=function(){var Q=P.result.indexOf(",")+1;k[O]=P.result.substr(Q);x++;z()}}catch(Q){console.log(Q),x++,z()}else x++,z()});K.send(H)}):(x++,z()):function(L,H){var K=L.length-H.length;L=L.indexOf(H,K);return-1!==L&&L===K}(M,".bmp")?JSZip.support.uint8array&&J.async("uint8array").then(function(L){L=new BmpDecoder(L);var H=document.createElement("canvas");H.width=L.width;H.height=L.height;H.getContext("2d").putImageData(L.imageData,