Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
U,g,y,H){v=mxEvent.isAltDown(k)?v:t.getCenterInsertPoint(new mxRectangle(0,0,y,H));var O=null;t.getModel().beginUpdate();try{O="txt"==U?b.insertAsPreText(g,v.x,v.y):t.insertVertex(null,null,null,v.x,v.y,y,H,"shape=image;noLabel=1;verticalAlign=top;aspect=fixed;imageAspect=0;image="+b.convertDataUri(g)+";"),t.setAttributeForCell(O,"plantUmlData",JSON.stringify({data:L,format:U},null,2))}finally{t.getModel().endUpdate()}null!=O&&(t.setSelectionCell(O),t.scrollCellToVisible(O))},t=b.editor.graph,x="plantUmlTxt"==