Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
M&&A(Editor.svgBrokenImage.src)};U.src=m}}catch(W){A(Editor.svgBrokenImage.src)}};Editor.prototype.convertImages=function(m,A,M,Q){null==Q&&(Q=this.createImageUrlConverter());var U=0,W=M||{};M=mxUtils.bind(this,function(P,V){P=m.getElementsByTagName(P);for(var X=0;X<P.length;X++)mxUtils.bind(this,function(Y){try{if(null!=Y){var Z=Q.convert(Y.getAttribute(V));if(null!=Z&&"data:"!=Z.substring(0,5)){var da=W[Z];null==da?(U++,this.convertImageToDataUri(Z,function(ba){null!=ba&&(W[Z]=ba,Y.setAttribute(V,
ba));U--;0==U&&A(m)})):Y.setAttribute(V,da)}else null!=Z&&Y.setAttribute(V,Z)}}catch(ba){}})(P[X])});M("image","xlink:href");M("img","src");0==U&&A(m)};Editor.base64Encode=function(m){for(var A="",M=0,Q=m.length,U,W,P;M<Q;){U=m.charCodeAt(M++)&255;if(M==Q){A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(U>>2);A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((U&3)<<4);A+="==";break}W=m.charCodeAt(M++);if(M==Q){A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(U>>