Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.bind(this,function(P){this.spinner.stop();y(Graph.xmlDeclaration+"\n"+Graph.svgDoctype+"\n"+mxUtils.getXml(P))})))}else z=n+".svg",g=this.getFileData(!1,!0,null,mxUtils.bind(this,function(P){this.spinner.stop();y(P)}),q)}}catch(P){this.handleError(P)}};EditorUi.prototype.createDownloadRequest=function(c,e,k,q,p,t,x,C,I,B,T,l,n){c=this.downloadRequestBuilder(c,e,k,q,p,t,x,C,I,B,T,l,n);e="";for(var z in c)k=c[z],null!=k&&(e+=z+"="+encodeURIComponent(k)+"&");return new mxXmlRequest(EXPORT_URL,
e)};EditorUi.prototype.downloadRequestBuilder=function(c,e,k,q,p,t,x,C,I,B,T,l,n){var z=this.editor.graph,E=z.getGraphBounds();k=this.getFileData(!0,null,null,null,k,0==t?!1:"xmlpng"!=e,null,null,null,!Editor.defaultCompressed,"pdf"==e);var A=null,N=null,Q=null;if(E.width*E.height>MAX_AREA||k.length>MAX_REQUEST_SIZE)throw{message:mxResources.get("drawingTooLarge")};B=B?"1":"0";"pdf"==e&&(null!=T?(A=T.from,N=T.to):0==t&&(Q="1"));"xmlpng"==e&&(B="1",e="png");if(("xmlpng"==e||"svg"==e)&&null!=this.pages&&