Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.extractGraphModelFromXref(V));null!=H&&(H=decodeURIComponent(H.replace(/\\\(/g,"(").replace(/\\\)/g,")")));return H};Editor.extractGraphModelFromXref=function(g){var y=g.trailer,H=null;null!=y&&(y=/.* \/Info (\d+) (\d+) R/g.exec(y.join("\n")),null!=y&&0<y.length&&(y=g[y[1]],null!=y&&(y=/.* \/Subject (\d+) (\d+) R/g.exec(y.join("\n")),null!=y&&0<y.length&&(g=g[y[1]],null!=g&&(g=g.join("\n"),H=g.substring(1,g.length-1))))));return H};Editor.extractParserError=function(g,y){var H=null;g=null!=
g?g.getElementsByTagName("parsererror"):null;null!=g&&0<g.length&&(H=y||mxResources.get("invalidChars"),y=g[0].getElementsByTagName("div"),0<y.length&&(H=mxUtils.getTextContent(y[0])));return null!=H?mxUtils.trim(H):H};Editor.addRetryToError=function(g,y){null!=g&&(g=null!=g.error?g.error:g,null==g.retry&&(g.retry=y))};Editor.mermaidToDrawio=function(g,y,H){if("function"===typeof mxMermaidToDrawio)return mxMermaidToDrawio(g,y,H)};Editor.configure=function(g){if(null!=g){Editor.config=g;Editor.configVersion=