Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxVsdxCanvas2D.prototype.convertSvg2Png=function(g,y,z){var B=this;this.filesLoading++;try{var m=document.createElement("canvas"),h=m.getContext("2d");y||(g=String.fromCharCode.apply(null,new Uint8Array(g)),g=window.btoa?btoa(g):Base64.encode(g,!0));y="data:image/svg+xml;base64,"+g;img=new Image;img.onload=function(){m.width=this.width;m.height=this.height;h.drawImage(this,0,0);try{z(m.toDataURL("image/png"))}catch(c){}B.filesLoading--;if(0==B.filesLoading)B.onFilesLoaded()};img.onerror=function(){console.log("SVG2PNG conversion failed");
try{z(g)}catch(c){}B.filesLoading--;if(0==B.filesLoading)B.onFilesLoaded()};img.src=y}catch(c){console.log("SVG2PNG conversion failed"+c.message);try{z(g)}catch(a){}this.filesLoading--;if(0==B.filesLoading)B.onFilesLoaded()}};