Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Ma.scale=x;L="data:image/svg+xml;base64,"+L;var Q=wa.gridSize*Ma.gridSteps*ka,X=wa.getGraphBounds(),ea=Ma.translate.x*x,la=Ma.translate.y*x,oa=ea+(X.x-ea)/x-Ca,xa=la+(X.y-la)/x-Ca,sa=new Image;sa.onload=function(){try{for(var va=-Math.round(Q-mxUtils.mod((ea-oa)*ka,Q)),Fa=-Math.round(Q-mxUtils.mod((la-xa)*ka,Q));va<Ka;va+=Q)for(var Ua=Fa;Ua<cb;Ua+=Q)Da.drawImage(sa,va/ka,Ua/ka);Va()}catch(ab){null!=U&&U(ab)}};sa.onerror=function(va){null!=U&&U(va)};sa.src=L}else Va()}catch(va){null!=U&&U(va)}});Ea.onerror=