Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
x,null,null,null,t)):mxscript("js/extensions.min.js",x,null,null,null,t))};EditorUi.prototype.generatePlantUmlImage=function(c,e,k,q){function p(C,I,B){c1=C>>2;c2=(C&3)<<4|I>>4;c3=(I&15)<<2|B>>6;c4=B&63;r="";r+=t(c1&63);r+=t(c2&63);r+=t(c3&63);return r+=t(c4&63)}function t(C){if(10>C)return String.fromCharCode(48+C);C-=10;if(26>C)return String.fromCharCode(65+C);C-=26;if(26>C)return String.fromCharCode(97+C);C-=26;return 0==C?"-":1==C?"_":"?"}var x=new XMLHttpRequest;x.open("GET",("txt"==e?PLANT_URL+