Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){b.spinner.stop();c(null);b.showError(mxResources.get("error"),mxResources.get("fileNotFound"),mxResources.get("ok"))}):(b.hideDialog(),c(B,null,null,I,d,g)):(B=b.convertDataUri(B),H=null==H?120:H,L=null==L?100:L,b.hideDialog(),c(B,H,L,I,d,g))},t=function(B,H){if(null!=B){var L=k?null:D.getModel().getGeometry(D.getSelectionCell());null!=L?n(B,L.width,L.height,H):n(B,null,null,H)}else b.hideDialog(),c(null)};this.init=function(){N.focus();if(Graph.fileSupport){N.setAttribute("placeholder",