Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p.setBackgroundImage(J.viewState.backgroundImage);p.getGlobalVariable=function(F){return"page"==F&&null!=J?J.getName():"pagenumber"==F?1:C.apply(this,arguments)};document.body.appendChild(p.container);null!=J&&p.model.setRoot(J.root)}}B=null!=B?B:this.getXmlFileData(u,v,G,T);L=null!=L?L:this.getCurrentFile();d=this.createFileData(B,p,L,window.location.href,d,g,n,t,u,H,G);p!=this.editor.graph&&p.container.parentNode.removeChild(p.container);return d};EditorUi.prototype.getHtml=function(d,g,n,t,u,v){v=